Publishing giant Nikkei disclosed that the group's headquarters in Singapore was hit by a ransomware attack almost one week ago, on May 13th. [...]  ( 3 min )

A stealthy and modular malware used to hack into Linux devices and build a DDoS botnet has seen a massive 254% increase in activity during the last six months, as Microsoft revealed today. [...]  ( 3 min )

The U.S. Department of Justice (DOJ) has announced a revision of its policy on how federal prosecutors should charge violations of the Computer Fraud and Abuse Act (CFAA), carving out "good-fath" security research from being prosecuted. [...]  ( 5 min )

The North Korean hacking group known as Lazarus is exploiting the Log4J remote code execution vulnerability to inject backdoors that fetch information-stealing payloads on VMware Horizon servers. [...]  ( 4 min )

Phishing attacks are now using automated chatbots to guide visitors through the process of handing over their login credentials to threat actors. [...]  ( 5 min )

During the first day of Pwn2Own Vancouver 2022, contestants won $800,000 after successfully exploiting 16 zero-day bugs to hack multiple products, including Microsoft's Windows 11 operating system and the Teams communication platform. [...]  ( 4 min )

Taiwan-based network-attached storage (NAS) maker QNAP warned customers on Thursday to secure their devices against attacks pushing DeadBolt ransomware payloads. [...]  ( 4 min )

Security researchers are warning that external remote access services continue to be the main vector for ransomware gangs to breach company networks. [...]  ( 5 min )

Microsoft has released the first ISO image for the new Windows 11 Preview builds in the Dev channel, allowing Windows Insiders to perform clean installs of the operating system. [...]  ( 3 min )

MS's TPM tip finally gets a grip – but shh – don't mention the Chromebooks You can imagine the sighs of relief all round in Redmond, Washington this week as Acer launched its new TravelMate range, which has Microsoft's Pluton silicon built-in.…  ( 8 min )

Working to compete with Intel as FastConnect comes to AMD-processor-powered PCs AMD and Qualcomm have rolled out a joint effort that brings remote management capabilities over Wi-Fi for AMD business systems, potentially boosting their appeal for corporate IT departments.…  ( 7 min )

CDN biz hopes merger will add a new way to use its edge services Content delivery network Fastly is purchasing Glitch, the company behind the web-based IDE of the same name.…  ( 8 min )

If you're on Windows 10, and meet requirements, it's ready to rumble... and 22H2 is waiting in the wings Microsoft has quietly updated its release health dashboard and declared Windows 11 "designated for broad deployment."…  ( 7 min )

Just because companies are publicly decreasing carbon footprints doesn't mean their cash isn't doing the opposite Many large corporations are taking measures to reduce their carbon footprints, but a new report claims that for some, the greatest source of emissions is actually from investments being made with their wealth, and this is undermining their own environmental efforts.…  ( 9 min )

They're using the invasion 'to take aim at the usual adversaries,' Mandiant told The Reg Pro-Beijing and Iran miscreants are using the war in Ukraine to spread disinformation that supports these countries' political interests — namely, advancing anti-Western narratives – according to threat-intel experts at Mandiant.…  ( 10 min )

Attempt to be interactive meets cries of 'Someone dumped a text box right in the center of my desktop!' Microsoft has rolled out an Insider Build threatening "interactive content on the Windows desktop."…  ( 7 min )

Share price collapses 19% as COVID-19 policy hits supply chain Cisco Systems surprised Wall Street by warning investors that the Shanghai lockdown and the war in Ukraine will eradicate any revenue growth prospects in its current – and final – quarter of 2022.…  ( 8 min )

So that's who to blame when its IT crashes, huh? American Airlines named Microsoft Azure its preferred cloud platform this week in a deal it says will cut costs, boost efficiency, and support its eco-sustainability goals.…  ( 7 min )

At the Haba, go, go Habana. The hottest research north of Havana The University of San Diego Supercomputer Center (SDSC) says it's ready to run test workloads on its experimental Voyager AI system, which looks to be the first-ever Intel Habana-based supercomputer.…  ( 8 min )

Singapore issues injunction against the sale of image procured through questionable foreclosure For the first time, a court has issued an injunction to stop the sale and transfer of a non-fungible token (NFT) at the request of a previous owner.…  ( 7 min )

Crew's raids continue worldwide, Talos team warns The US government's alert three months ago warning businesses and government agencies about the threat of BlackByte has apparently done little to slow down the ransomware group's activities.…  ( 9 min )

Tech exploits electromagnetically induced transparency to form highly sensitive electric field detector Brit telecoms giant BT is undertaking a trial of new antenna technology that may boost the range of 5G networks and reduce mobile network energy consumption.…  ( 8 min )

For tiny Venn diagram wedge who want the feel of a mechanical keyboard plus, er, emoji keys So many mechanical keyboards put function ahead of form. Put less charitably, they're ugly as sin. The Logitech Pop, a $100 wireless mechanical keyboard, tries to play both sides of the field.…  ( 9 min )

No 'reportable concerns' yet plenty of concerned feedback As Google's self-imposed "late 2023" deadline to kill all third party cookies in its Chrome browser looms, the giant has handed in its first quarterly Privacy Sandbox report to the UK's competition regulator.…  ( 7 min )

Miners behind the Great Firewall may never have downed tools, say Cambridge crypto-boffins China has become the world’s second most prolific miner of bitcoin – or maybe it always was – according to new data from the Cambridge Centre for Alternative Finance (CCAF).…  ( 7 min )

British startup Wayve gets supercomputing leg up Microsoft is pumping supercomputing oomph as well as funds into a British-born autonomous vehicle startup.…  ( 7 min )

Engineers debugging at 160 bits per second, with 41 hours latency NASA engineers are investigating anomalous telemetry data produced by venerable space probe Voyager 1.…  ( 7 min )

No, you're not really gonna be hacked. But you may be surprised Some research into the potentially exploitable low-power state of iPhones has sparked headlines this week.…  ( 9 min )

Well short of planned 70 percent domestic capacity China’s integrated circuit (IC) production has failed to keep pace with its appetite for silicon, with market research firm IC Insights predcicting the nation will produce only one in five ICs it uses in 2026.…  ( 7 min )

Cutting costs across sprawling business as COVID makes life hard in China Chinese tech giant Tencent has recorded its first ever quarter-to-quarter revenue fall, warned that COVID-19 lockdowns will hurt messing with its business, and cautioned against assumptions that Beijing is ready to enthusiastically support tech companies.…  ( 8 min )

We're shutting down as we can no longer pay staff, bills, web giant says Google Russia is shutting down and filing for bankruptcy after Vladimir Putin's government confiscated the Chocolate Factory's bank account in the nation.…  ( 7 min )

Critical authentication bypass revealed, older flaws under active attack Uncle Sam's Cybersecurity and Infrastructure Security Agency (CISA) has issued two warnings in a single day to VMware users, as it believes the virtualization giant's products can be exploited by miscreants to gain control of systems.…  ( 8 min )

Foreign workers favored over US residents because that's what clients wanted, allegedly Amtex Systems Incorporated, an IT staffing and recruiting firm based in New York City, has agreed to settle claims it discriminated against American workers because company clients wanted workers with temporary visas.…  ( 8 min )

A sneak peek at a notebook that could be revealed this year Pic  As Apple and Qualcomm push for more Arm adoption in the notebook space, we have come across a photo of what could become one of the world's first laptops to use the open-source RISC-V instruction set architecture.…  ( 8 min )

Biz tells us: Won't someone please think of the ... fraud we've stopped Democrat senators want the FTC to investigate "evidence of deceptive statements" made by ID.me regarding the facial-recognition technology it controversially built for Uncle Sam.…  ( 9 min )

A novel Bluetooth relay attack can let cybercriminals more easily than ever remotely unlock and operate cars, break open residential smart locks, and breach secure areas. The vulnerability has to do with weaknesses in the current implementation of Bluetooth Low Energy (BLE), a wireless technology used for authenticating Bluetooth devices that are physically located within a close range. <!-  ( 3 min )

The 2022 SaaS Security Survey Report, in collaboration with CSA, examines the state of SaaS security as seen in the eyes of CISOs and security professionals in today's enterprises. The report gathers anonymous responses from 340 CSA members to examine not only the growing risks in SaaS security but also how different organizations are currently working to secure themselves. Demographics The  ( 5 min )

Google last month addressed a high-severity flaw in its OAuth client library for Java that could be abused by a malicious actor with a compromised token to deploy arbitrary payloads. Tracked as CVE-2021-22573, the vulnerability is rated 8.7 out of 10 for severity and relates to an authentication bypass in the library that stems from an improper verification of the cryptographic signature.  ( 3 min )

A new research published by academics from KU Leuven, Radboud University, and the University of Lausanne has revealed that users' email addresses are exfiltrated to tracking, marketing, and analytics domains before such is submitted and without prior consent. The study involved crawling 2.8 million pages from the top 100 websites, and found that as many as 1,844 websites allowed trackers to  ( 3 min )

VMware has issued patches to contain two security flaws impacting Workspace ONE Access, Identity Manager, and vRealize Automation that could be exploited to backdoor enterprise networks. The first of the two flaws, tracked as CVE-2022-22972 (CVSS score: 9.8), concerns an authentication bypass that could enable an actor with network access to the UI to gain administrative access without prior  ( 3 min )

Die Bibliothek zum Erstellen von Benutzeroberflächen bringt einen veränderten Umgang mit Stores und Streaming.  ( 4 min )

Hewlett Packard Enterprise baut die Server für europäische Supercomputer künftig in der Tschechischen Republik zusammen – HPEs vierter Standort dieser Art.  ( 3 min )

Der Edge-Cloud-Anbieter Fastly erwirbt mit Glitch eine Plattform, die rund 1,8 Millionen Entwickler zum Erstellen von Full-Stack-Webapplikationen nutzen.  ( 4 min )

Release 3.2.0 von Apache Kafka stellt die Zugriffskontrolllisten um und hat ein integriertes Autorisierungswerkzeug für den Betrieb des Clusters an Bord.  ( 4 min )

Eine Keynote der Entwicklerkonferenz in Karlsruhe beschäftigt sich mit Weltmodellen und Symoblic Reasoning, die andere widmet sich AD-Systemen.  ( 4 min )

Veeam beleuchtet die Auswirkungen von Ransomware-Angriffen: 76 Prozent der Unternehmen geben an, gezahlt zu haben, um ihre Daten wiederzuerlangen.  ( 4 min )

Mit Red Hat Enterprise Linux 9 stehen für die Enterprise-Distribution einige grundlegende Änderungen an. Was bedeuten sie für die Arbeit der Administratoren?  ( 8 min )

Meta hat offenbar einen Einstellungsstopp für mehrere Geschäftsbereiche verhängt. Betroffen seien auch die Teams von Facebook Gaming und Messenger Kids.  ( 3 min )

Knapp einen Monat nach dem Start der "Umsehen"-Funktion hat Apple seinen Street-View-Dienst jetzt erweitert. Weitere Städte in Deutschland sollen folgen.  ( 3 min )

Auch viele Softwareentwickler wollen lieber weiter im Homeoffice arbeiten. Mit den richtigen Methoden und Werkzeugen klappt das – die neue iX stellt sie vor.  ( 5 min )

Einen Monat nach Veröffentlichung des KI-Systems, das Bilder anhand von Beschreibungen erstellt, zieht OpenAI Bilanz und will weiteren Usern Zugriff gewähren.  ( 5 min )

In den Zugangssicherungsgeräten der SMA-100-Reihe von Sonicwall könnten Nutzer eigene Befehle als root ausführen. Ein Firmware-Update steht bereit.  ( 3 min )

Microsofts Sicherheitsteams warnen vor Angriffen auf MSSQL, die nach initialem Einbruch nicht mehr Powershell zur weiteren Ausbreitung nutzen.  ( 3 min )

heise Developer präsentiert software-architektur.tv, Eberhard Wolffs Videocast. Die Episode führt den Architekturentwurf für die Beispielaufgabe fort.  ( 3 min )

In seinem neuen Buch verrät "iPod-Vater" Tony Fadell Anekdoten und Geschichten aus seiner Apple-Zeit. Einige davon sind überraschend.  ( 4 min )

Der Hersteller Qnap warnt vor neuen Angriffen mit Ransomware auf die Netzwerkspeicher des Unternehmens. Admins sollen bereitstehende Updates zügig installieren.  ( 3 min )

Mit dem Theme-Builder Jupiter Theme oder Jupiter X Core Plugin erstellte WordPress-Websites sind verwundbar.  ( 3 min )

Die chinesische Großstadt Shanghai steckt immer noch im Lockdown fest. Apple-Monteur Quanta erwägt deshalb, die Herstellung zu verlagern.  ( 4 min )

Ein Schnelleinstieg in Python für alle, die bereits Programmierkenntnisse in einer anderen Sprache haben. Online-Schulung an drei Tagen; noch Plätze frei.  ( 3 min )

Parallel zum finalen Hacking-Wettbewerb für junge Menschen wird es in München eine Ausgabe der Fachkonferenz und Recruiting-Messe IT Job kompakt geben.  ( 3 min )

Die US-amerikanische CISA warnt vor Angriffen auf mehrere Sicherheitslücken in VMware-Produkten. VMware dichtet zudem neu entdeckte Schwachstellen ab.  ( 3 min )

Wer sich zu wichtigen IT-Themen weiterbilden möchte, kann noch bis Sonntag beim Kauf der Videokurse in der heise Academy kräftig sparen.  ( 5 min )

Don’t you hate it when you load a website or web app, some content displays and then some images load — causing content to shift around? That’s called content reflow and can lead to an incredibly annoying user experience for … Inline Image Previews with Sharp, BlurHash, and Lambda Functions originally published on CSS-Tricks. You should get the newsletter.  ( 7 min )

The world is rapidly moving from human-directed manufacturing using computerized assembly lines to largely automated smart factories that manufacture more efficiently using real-time data. Considered by many to be the fourth industrial revolution, or “Industry 4.0,” this transformation requires a bevy of technologies to deliver on its promise of ultra-reliable low-latency communications (URLLC). From smart devices…  ( 5 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Why China is still obsessed with disinfecting everything In a one-minute video that went viral in China in early May, three government workers in hazmat suits spray disinfectant all over someone’s home: inside…  ( 4 min )

In a one-minute video that went viral in China in early May, three government workers in hazmat suits spray disinfectant all over someone’s home: inside the fridge, under the television, over the couch. On social media, Chinese people worried about whether their home would experience the same treatment if they were unlucky enough to catch…  ( 6 min )

In this article, Benjamin Ajibade introduces Kubernetes to front-end engineers and explaines why Kubernetes is integral in a production-ready microservice architecture. Some key terms that are important for team collaboration will be discussed and conclude the post with a quick deployment to getting started as a beginner.  ( 10 min )

In den Zugangssicherungsgeräten der SMA-100-Reihe von Sonicwall könnten Nutzer eigene Befehle als root ausführen. Ein Firmware-Update steht bereit.  ( 3 min )

Der Hersteller Qnap warnt vor neuen Angriffen mit Ransomware auf die Netzwerkspeicher des Unternehmens. Admins sollen bereitstehende Updates zügig installieren.  ( 3 min )

Mit dem Theme-Builder Jupiter Theme oder Jupiter X Core Plugin erstellte WordPress-Websites sind verwundbar.  ( 3 min )

Die US-amerikanische CISA warnt vor Angriffen auf mehrere Sicherheitslücken in VMware-Produkten. VMware dichtet zudem neu entdeckte Schwachstellen ab.  ( 3 min )

The Spanish police have announced the arrest of 13 people and the launch of investigations on another 7 for their participation in a phishing ring that defrauded at least 146 people. [...]  ( 3 min )

WordPress security analysts have discovered a set of vulnerabilities impacting the Jupiter Theme and JupiterX Core plugins for WordPress, one of which is a critical privilege escalation flaw. [...]  ( 3 min )

After suffering a ransomware attack by the Hive operation, the Bank of Zambia made it clear that they were not going to pay by posting a picture of male genitalia and telling the hackers to s… (well, you can use your imagination). [...]  ( 5 min )

The US government has recovered over $15 million from Swiss bank accounts belonging to operators behind the '3ve' online advertising fraud scheme. [...]  ( 3 min )

The Department of Homeland Security's cybersecurity unit ordered Federal Civilian Executive Branch (FCEB) agencies today to urgently update or remove VMware products from their networks by Monday due to an increased risk of attacks. [...]  ( 3 min )

A previously unknown Chinese hacking group known as 'Space Pirates' targets enterprises in the Russian aerospace industry with phishing emails to install novel malware on their systems. [...]  ( 4 min )

VMware warned customers today to immediately patch a critical authentication bypass vulnerability "affecting local domain users" in multiple products that can be exploited to obtain admin privileges. [...]  ( 3 min )

In a joint advisory issued today, CISA and the Multi-State Information Sharing and Analysis Center (MS-ISAC) warned admins of active attacks targeting a critical F5 BIG-IP network security vulnerability (CVE-2022-1388). [...]  ( 4 min )

Threat actors are luring potential thieves by spamming login credentials for other people account's on fake crypto trading sites, illustrating once again, that there is no honor among thieves. [...]  ( 4 min )

Microsoft warned of brute-forcing attacks targeting Internet-exposed and poorly secured Microsoft SQL Server (MSSQL) database servers using weak passwords. [...]  ( 3 min )

The U.S. government is warning that the Democratic People's Republic of Korea (DPRK) is dispatching its IT workers to get freelance jobs at companies across the world to obtain privileged access that is sometimes used to facilitate cyber intrusions. [...]  ( 5 min )

The U.S. government is warning that the Democratic People's Republic of Korea (DPRK) is dispatching its IT workers to get freelance jobs at companies across the world to obtain privileged access that is sometimes used to facilitate cyber intrusions. [...]  ( 5 min )

Russia-linked crime-as-a-service crew is rich, professional – and investing in R&D Analysis  Wizard Spider, the Russia-linked crew behind high-profile malware Conti, Ryuk and Trickbot, has grown over the past five years into a multimillion-dollar organization that has built a corporate-like operating model, a year-long study has found.…  ( 9 min )

Everyone's entitled to a viewpoint but what's your viewpoint on what exactly is and isn't a viewpoint? A coalition of advocacy groups on Tuesday asked the US Supreme Court to block Texas' social media law HB 20 after the US Fifth Circuit Court of Appeals last week lifted a preliminary injunction that had kept it from taking effect.…  ( 8 min )

FBI and co blow lid off latest PHP tampering scam The FBI and its friends have warned businesses of crooks scraping people's credit-card details from tampered payment pages on compromised websites.…  ( 8 min )

Rocky and Alma are here for those CentOS Linux users who are still smarting Red Hat Enterprise Linux 8.6, Alma Linux 8.6 and Rocky Linux 8.6 are all out now, for various platforms.…  ( 8 min )

Still no damages number, likely to be way less than $5 billion When an accounts assistant asked Autonomy founder Mike Lynch to approve a $700,000 purchase order in December 2010, the British exec "wrote 'ok' from his iPhone."…  ( 11 min )

OVHcloud and Nextcloud lawsuits hit the spot as Windows giant admits to potential competition issues Microsoft is offering a series of concessions over its software licensing policies to European cloud providers in a bid to address their accusations of anti-competitive tactics and cool any interest from local regulators.…  ( 9 min )

Less than half said business leaders in their bank understood 'opportunities of cloud' A report into cloud adoption in the international banking industry shows that despite a broad appetite for cloud services, only around a third of banks have migrated more than 30 percent of their applications.…  ( 8 min )

Irish Council on Civil Liberties said this is first time the scope of real-time bidding is being measured The average American has their personal information shared in an online ad bidding war 747 times a day. For the average EU citizen, that number is 376 times a day. In one year, 178 trillion instances of the same bidding war happen online in the US and EU.…  ( 10 min )

2 days a week still compulsory but U-turn gives credence to worker concerns Apple has postponed employees' scheduled return to the office for three days a week amid a jump in COVID-19 infections.…  ( 8 min )

Facility supports a flurry of HPC development, centered in the Czech Republic Hewlett Packard Enterprise (HPE) expanded its European footprint this week as it revealed plans for a new manufacturing facility in the Czech Republic, dedicated to building high-performance compute (HPC) systems.…  ( 7 min )

After years of crackdowns, Beijing changing its tune on the industry The vice premier of China and Xi Jinping's economic right hand man, Liu He, has offered a rare show of support to China's tech industry – both domestic and abroad.…  ( 7 min )

Chip biz bets interconnect tech will cement its cloud claim, one day Fresh off the heels of Marvell Technology's Tanzanite acquisition, executives speaking at a JP Morgan event this week offered a glimpse at its compute express link (CXL) roadmap.…  ( 9 min )

June debut of zero trust GDAP tool should make it harder for crims to attack through MSPs and resellers Microsoft has advised its reseller community it needs to pay attention to the debut of improve security tooling aimed at making it harder for attackers to worm their way into your systems through partners.…  ( 8 min )

According to this cybersecurity outfit that wants your business, anyway The fraud industry, in some respects, grew in the first quarter of the year, with crooks putting more human resources into some attacks while increasingly relying on bots to carry out things like credential stuffing and fake account creation.…  ( 9 min )

French frolics for Chromium browser on Android Automotive Browser-maker Vivaldi has added Renault to the list of users for the Android Automotive OS version of its eponymous web renderer.…  ( 8 min )

Sysrv-K malware infects unpatched tin, Microsoft warns The latest variant of the Sysrv botnet malware is menacing Windows and Linux systems with an expanded list of vulnerabilities to exploit, according to Microsoft.…  ( 9 min )

Puny human brains baffled by K8s complexity, leading to blunder fears Kubernetes, despite being widely regarded as an important technology by IT leaders, continues to pose problems for those deploying it. And the problem, apparently, is us.…  ( 9 min )

Tax portal wobbles, again Services giant Infosys has had a difficult week, with one of its flagship projects wobbling and India's government continuing to pressure it over labor practices.…  ( 8 min )

Phew! Google has quietly dropped its demand that users of its free G Suite legacy edition cough up to continue enjoying custom email domains and cloudy productivity tools.…  ( 7 min )

MIPS...ish is on the march in the Middle Kingdom Version 12.1 of the GNU Compiler Collection (GCC) was released this month, and among its many changes is support for China's LoongArch processor architecture.…  ( 8 min )

CEO of e-tail market leader JD perhaps boldly points out wider economic impact of zero-virus stance The CEO of China’s top e-commerce company, JD, has pointed out the economic impact of China’s current COVID-19 lockdowns - and the news is not good.…  ( 8 min )

Can't say when, where, nor price tag. Has promised 40k wafers a month at between 28nm and 40nm Taiwanese contract manufacturer to the stars Foxconn is to build a chip fabrication plant in Malaysia.…  ( 7 min )

The little lander that couldn't (any longer) The Martian InSight lander will no longer be able to function within months as dust continues to pile up on its solar panels, starving it of energy, NASA reported on Tuesday.…  ( 9 min )

With the benefit of maybe revitalizing the x86 giant’s foundry business Analysis  Here's something that would have seemed outlandish only a few years ago: to help fuel Intel's future growth, the x86 giant has vowed to do what it can to make the open-source RISC-V ISA worthy of widespread adoption.…  ( 10 min )

Looking for tech talent? Kim Jong-un's friendly freelancers, at your service Pay close attention to that resume before offering that work contract.…  ( 8 min )

A stunning surprise to no one in this Solar System Elon Musk said his bid to acquire and privatize Twitter "cannot move forward" until the social network proves its claim that fake bot accounts make up less than five per cent of all users.…  ( 8 min )

Von Parkplatzüberwachung bis zur Baustellenerfassung: Mit dem energiesparenden IoT-Funk will Netcologne die Digitalisierung in der Stadt Köln voranbringen.  ( 4 min )

Auf einem abgeschalteten iPhone kann Malware laufen, warnt ein Forschungsteam der TU Darmstadt. Apples Low-Power-Mode fehlen Schutzvorkehrungen.  ( 4 min )

Bei einem Cyberangriff auf die TU Berlin kam es im vergangenen Jahr zu monatelangen IT-Ausfällen. Hunderte Dateien mit vertraulichen Inhalten wurden gestohlen.  ( 4 min )

Das auf IT-Sicherheit spezialisierte Unternehmen Secunet aus Essen kauft den Berliner Cloud-Anbieter SysEleven für 50 Millionen Euro.  ( 3 min )

Internationale IT-Sicherheitsbehörden listen die am häufigsten missbrauchten Fehler bei der Umsetzung von IT-Sicherheit. Sie benennen aber auch Lösungen.  ( 4 min )

Das quelloffene Vektorgrafikprogramm Inkspace ist in der Version 1.2 verfügbar. Mit der neuen Version lassen sich auch mehrseitige Dokumente gestalten.  ( 3 min )

Red Hat hat die Sicherheit rund um Kubernetes unter die Lupe genommen: 93 Prozent der Befragten hatten im vergangenen Jahr mindestens einen Security-Vorfall.  ( 4 min )

Der neue Service Assured Open Source Software liefert Pakete, die Google ausgiebig getestet hat und im eigenen Entwicklungsprozess verwendet.  ( 4 min )

Git-Hoster und CI/CD-Anbieter GitLab gibt eine Funktion für kostenlose Accounts frei, mit der Änderungen an einem Repo schneller in einem Cluster ankommen.  ( 3 min )

Der E-Mail-Service-Provider Posteo hat seit Dienstag verstärkt mit Distributed-Denial-of-Service-Attacken zu kämpfen. Technische Maßnahmen wurden getroffen.  ( 3 min )

Ab sofort lässt sich das neue Outlook auch offiziell testen. Auch wenn manche Produktivitätsexperten davon abraten, sollen E-Mails nun den Tag strukturieren.  ( 4 min )

Das TestRail-Team hat ein CLI-Werkzeug vorgestellt, mit dem automatisierte Testergebnisse direkt aus der Kommandozeile an TestRail geschickt werden können.  ( 4 min )

Der neue RFC der Internet Engineering Task Force nutzt die integrierte Verschlüsselung und bessere Geschwindigkeit von QUIC für die Namensauflösung.  ( 5 min )

Das Sonderheft "c't Sicher ins Netz" liefert jede Menge Tipps und Rüstzeug für geschützte, entspannte und Privatsphäre-wahrende Reisen durchs Internet.  ( 4 min )

Die Keras-Library bekommt zusätzliche ResNet-Modelle und flexiblere Optimizer. Die schlanke Lite-Variante kennt zusätzliche Datentypen und Operationen.  ( 4 min )

Eine Sicherheitslücke im WordPress-Plug-in Tatsu Builder erlaubt Angreifern, Schadcode einzuschleusen. Derzeit werden massive Angriffe darauf beobachtet.  ( 3 min )

Die KubeCon EU 2022 hat in Valencia begonnen. Open-Source-Projekte und Firmen aus dem Cloud-Umfeld stellen bis zum 20. Mai ihre Software vor.  ( 4 min )

Die Software Freedom Conservancy streitet mit TV-Anbieter Vizio wegen GPL-Lizenzverstößen: Ein Präzedenzfall für die Open-Source-Rechtsprechung bahnt sich an.  ( 8 min )

Die Apple Business Essentials waren bislang strikt auf Apples Anwendungsverteilsystem ausgerichtet. Das ändert sich nun glücklicherweise.  ( 4 min )

Berechnen Nvidia-Grafikkarten von Angreifern präparierte Shader, kann es zu Sicherheitsproblemen kommen.  ( 3 min )

Aus den eigenen Unternehmensdaten mit den Tools des Elastic Stack Erkenntnisse ziehen. Dreitägige Online-Schulung für Kurzentschlossene vom 23. bis zum 25. Mai.  ( 3 min )

Der Zahlungsdienstleister Mastercard will mit rein biometrischer Authentifizierung eine "neue Ära" des Bezahlens einläuten – mit einem "Winken" oder "Lächeln".  ( 4 min )

Microsoft stellt die Unterstützung für die Windows-Versionen Server und Windows 10 20H2 ein. Windows Server gibt es künftig nicht mehr als Halbjahres-Releases.  ( 4 min )

Zwei SUSEaner erklären, welche Tools die global verteilten Teams für die virtuelle Kommunikation nutzen – und warum auch persönliche Treffen ihre Vorzüge haben.  ( 5 min )

Sicherheitsmängel in Bluetooth Low Energy erlauben Zugriff auf Teslas Elektroautos, andere elektronische Geräte und Türschlösser. Tesla bestätigt das Problem.  ( 4 min )

The inner workings of a cybercriminal group known as the Wizard Spider have been exposed, shedding light on its organizational structure and motivations. "Most of Wizard Spider's efforts go into hacking European and U.S. businesses, with a special cracking tool used by some of their attackers to breach high-value targets," Swiss cybersecurity company PRODAFT said in a new report shared with The  ( 3 min )

Ransomware is not a new attack vector. In fact, the first malware of its kind appeared more than 30 years ago and was distributed via 5.25-inch floppy disks. To pay the ransom, the victim had to mail money to a P.O. Box in Panama. Fast forward to today, affordable ransomware-as-a-service (RaaS) kits are available on the dark web for anyone to purchase and deploy and attackers have an infinite  ( 5 min )

To cash in on a thriving market, a managed security service provider (MSSP) must navigate unprecedented competition and complex challenges. The good news is that demand is through the roof. 69% of organizations plan to boost spending on cybersecurity in 2022.  The bad news is that everyone wants a piece of the pie. MSSPs must outshine each other while fending off encroachments by traditional IT  ( 3 min )

Microsoft on Tuesday warned that it recently spotted a malicious campaign targeting SQL Servers that leverages a built-in PowerShell binary to achieve persistence on compromised systems. The intrusions, which leverage brute-force attacks as an initial compromise vector, stand out for their use of the utility "sqlps.exe," the tech giant said in a series of tweets. The ultimate goals of the  ( 3 min )

Highly skilled software and mobile app developers from the Democratic People's Republic of Korea (DPRK) are posing as "non-DPRK nationals" in hopes of landing freelance employment in an attempt to enable the regime's malicious cyber intrusions. That's according to a joint advisory from the U.S. Department of State, the Department of the Treasury, and the Federal Bureau of Investigation (FBI)  ( 3 min )

Microsoft is warning of an emerging threat targeting internet-connected cryptocurrency wallets, signaling a departure in the use of digital coins in cyberattacks. The tech giant dubbed the new threat "cryware," with the attacks resulting in the irreversible theft of virtual currencies by means of fraudulent transfers to an adversary-controlled wallet. "Cryware are information stealers that  ( 3 min )

The notorious Conti ransomware gang, which last month staged an attack on Costa Rican administrative systems, has threatened to "overthrow" the new government of the country. "We are determined to overthrow the government by means of a cyber attack, we have already shown you all the strength and power," the group said on its official website. "We have our insiders in your government. We are also  ( 3 min )

I was fortunate last year to get approached by Shawn Wang (swyx) about doing some work for Temporal. The idea was to cast my creative eye over what was on the site and come up with some … An Interactive Starry Backdrop for Content originally published on CSS-Tricks. You should get the newsletter.  ( 10 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. The baby formula shortage has birthed a shady online marketplace Across the United States, parents are scrambling to find baby formula amid a nationwide shortage. To non-parents, the shortage may seem sudden, but…  ( 4 min )

Money is weird now. When we were settling in on the theme for our May/June issue, I decided to buy an NFT of an Olive Garden for my friend Katie, who really loves Olive Garden. It was also an attempt to try to better understand NFTs. Each of the “Non-Fungible Olive Gardens,” really just a…  ( 3 min )

Solar panels are basically synonymous with silicon. The material is used in about 95% of the panels in today’s market. But silicon solar cells are limited in how much energy they can harness from the sun, and they are still relatively expensive to make.  For many, compounds called perovskites have long held promise as potentially…  ( 4 min )

After Ashley Diaz had her baby in early April, she faced a setback. She wasn’t producing enough breast milk. Her newborn son needed formula to supplement his nutrition. So she sent her mother to Target to stock up. She came back with only two boxes—the maximum allowed. Now, many of those store shelves are empty,…  ( 5 min )

Eine Sicherheitslücke im WordPress-Plug-in Tatsu Builder erlaubt Angreifern, Schadcode einzuschleusen. Derzeit werden massive Angriffe darauf beobachtet.  ( 3 min )

Berechnen Nvidia-Grafikkarten von Angreifern präparierte Shader, kann es zu Sicherheitsproblemen kommen.  ( 3 min )

'We're open to all hypotheses, we're open to any conclusions' says official A US House of Representatives subcommittee on Tuesday heard from Pentagon officials on reports of and investigations into unidentified aerial phenomena (UAP) – a category that encompasses unidentified flying objects (UFO) and saves room for optical illusions, lens flare, smudges in photos, and other possibilities like meteorological events.…  ( 10 min )

* Terms, conditions, hardware specs and software may vary – a lot As a slowdown in PC sales brings down prices for graphics cards, AMD is hoping to win over the market's remaining buyers with a bold, new claim that its latest Radeon cards provide better performance for the dollar than Nvidia's most recent GeForce cards.…  ( 9 min )

A futuristic design won't make people want to come back – just ask Apple After nearly a decade of planning and five years of construction, Google is cutting the ribbon on its Bay View campus, the first that Google itself designed.…  ( 8 min )

Anything that uses proximity-based BLE is vulnerable, claim researchers Tesla Model 3 and Y owners, beware: the passive entry feature on your vehicle could potentially be fooled by a new form of relay attack.…  ( 8 min )

Java and Python packages are the first on the list Google has a plan — and a new product plus a partnership with developer-focused security shop Snyk — that attempts to make it easier for enterprises to secure their open source software dependencies.…  ( 8 min )

Mission to lunar orbit is further than any Photon satellite bus has gone before Rocket Lab has taken delivery of NASA's CAPSTONE spacecraft at its New Zealand launch pad ahead of a mission to the Moon.…  ( 7 min )

More Euro-presence than any other Chinese company, but still nowhere near Google or AWS Alibaba has pulled ahead of its Chinese rivals in Europe with the opening of a third datacenter in Germany.…  ( 7 min )

Still a 'nimble idea factory' under the gaze of the Chameleon Kubecon  SUSE acquisition Rancher is growing up, with a decidedly enterprise-friendly 2.6.5 release and version 5.0 of NeuVector.…  ( 7 min )

Pain points plugged in open-source vector art package Open-source vector drawing package Inkscape has resolved at least one user pain point with v1.2 – multiple-page documents.…  ( 7 min )

PostgreSQL, MongoDB, MySQL tools for overly busy DBAs, less experienced devs Percona Live  Open-source database services biz Percona has confirmed general availability of a database management platform initially targeted at PostgreSQL, MySQL, and MongoDB.…  ( 8 min )

Investors want compensation-performance link, but manufacturing plan will dent bottom line Intel shareholders voted to reject the compensation packages for the chipmaker's top execs, according to regulatory documents filed with the Securities and Exchange Commission (SEC), although the vote was non-binding on the company.…  ( 7 min )

Go host yourself with a tiny low-powered Arm cluster in a box for $219 The Turing Pi 2 crowdfunding campaign has soared past its $64,000 goal in single a day, currently standing at $1,027,428 with more than 3,400 backers.…  ( 7 min )

Show us that benefits outweigh the cost, BCS challenges government BCS, The Chartered Institute for IT, has warned that proposed changes to Britain's data protection rules must not put the flow of data between the EU and the UK at risk.…  ( 7 min )

It should just run like x86, pair basically stress Arm is this week celebrating passing a few of its own self-set milestones in its long quest to compete against x86 stalwarts Intel and AMD in the server processor space.…  ( 9 min )

You look like Windows, and you look like Windows and you look like Windows ... Analysis  As a mainstream desktop OS, Linux is doing better than ever. The Year of Linux on the Desktop came some time ago, and it's ChromeOS (Chromebooks were outselling Macs until recently). But there's a problem – there is almost no diversity of design.…  ( 14 min )

Singapore's safety scheme measures scam-combatting capability A newly implemented e-commerce rating system in the city-state of Singapore has rated Facebook's Marketplace as the least trustworthy e-commerce platform, behind Amazon and its Alibaba-owned Asian analogue Lazada.…  ( 8 min )

More types of biz fall under expanded rules – and fines for those who fall short Europe has moved closer toward new cybersecurity standards and reporting rules following a provisional network and information systems agreement dubbed NIS2 by the European Council and Parliament. …  ( 9 min )

The GSMA would say that, yet Big Tech is making it harder for carriers to turn a quid Telcos risk missing out on revenue needed to fund new networks, despite demand for their services soaring – and Big Tech is to blame.…  ( 9 min )

If his surgery was as bad as his opsec, this chap has caused a lot of trouble The US Attorney’s Office has charged a 55-year-old cardiologist with creating and selling ransomware and profiting from revenue-share agreements with criminals who deployed his product.…  ( 9 min )

'Brushing' tops the list, as quantity of forbidden content continue to rise China’s Ministry of Public Security has revealed the five most prevalent types of fraud perpetrated online or by phone.…  ( 8 min )

Appeal petition as doomed as the Itanic chips at the heart of decade-long drama The US Supreme Court on Monday declined to hear Oracle's appeal to overturn a ruling ordering the IT giant to pay $3 billion in damages for violating a decades-old contract agreement.…  ( 8 min )

Estimated $42bn vanished with collapse of UST, Luna – we explain what all this means TerraUSD, a so-called "stablecoin," has seen its value drop from $1 apiece a week ago to about $0.09 on Monday, demonstrating not all that much stability.…  ( 9 min )

Cloud biz says it is reacting to customer mix largely shifting from lone devs to SMBs DigitalOcean attempted to lessen the sting of higher prices this week by announcing a cut-rate instance aimed at developers and hobbyists.…  ( 9 min )

Fine-print crucially deemed contractual agreement as well as copyright license in smartTV source-code case The Software Freedom Conservancy (SFC) has won a significant legal victory in its ongoing effort to force Vizio to publish the source code of its SmartCast TV software, which is said to contain GPLv2 and LGPLv2.1 copyleft-licensed components.…  ( 11 min )

Citizen allegedly moved $10m-plus in BTC into banned nation US prosecutors have accused an American citizen of illegally funneling more than $10 million in Bitcoin into an economically sanctioned country.…  ( 8 min )

Microsoft has reminded customers today that Windows Server, version 20H2 will be reaching the end of service (EOS) on August 9, 2022. [...]  ( 3 min )

NVIDIA has released a security update for a wide range of graphics card models, addressing four high-severity and six medium-severity vulnerabilities in its GPU drivers. [...]  ( 4 min )

Microsoft says Defender for Endpoint now comes with a new 'troubleshooting mode' that will help Windows admins test Defender Antivirus performance and run compatibility scenarios without getting blocked by tamper protection. [...]  ( 4 min )

A joint security advisory issued by multiple national cybersecurity authorities revealed today the top 10 attack vectors most exploited by threat actors for breaching networks. [...]  ( 4 min )

Security researchers at the NCC Group have developed a tool to carry out a Bluetooth Low Energy (BLE) relay attack that bypasses all existing protections to authenticate on target devices. [...]  ( 5 min )

ISO 27001 may seem like a big undertaking, but the certification can pay off in more ways than one—including overlap with compliance regulations. Read about the benefits of ISO 27001 and how to get started. [...]  ( 5 min )

The Cybersecurity and Infrastructure Security Agency (CISA) has added two more vulnerabilities to its list of actively exploited bugs, a code injection bug in the Spring Cloud Gateway library and a command injection flaw in Zyxel firmware for business firewalls and VPN devices. [...]  ( 3 min )

Hackers are massively exploiting a remote code execution vulnerability, CVE-2021-25094, in the Tatsu Builder plugin for WordPress, which is installed on about 100,000 websites. [...]  ( 3 min )

HTML files remain one of the most popular attachments used in phishing attacks for the first four months of 2022, showing that the technique remains effective against antispam engines and works well on the victims themselves. [...]  ( 4 min )

Die "E-Rezept-Enthusiasten" wollen das Rezept ins Ziel bringen: Dem Gesundheitswesen soll unter die Arme gegriffen und Patienten besser aufgeklärt werden.  ( 5 min )

Steckerfertige PV-Anlagen senken die Stromkosten mit Sonnenenergie. Laut VDE darf man sie nicht per Schuko anschließen – das wird sich vorerst nicht ändern.  ( 5 min )

Erst sollten alle Anwender zahlende Workspace-Kunden werden – nun können wenigstens Privatnutzer die G Suite doch für nichtkommerzielle Zwecke gratis einsetzen.  ( 3 min )

Ashton Kutcher und Quentin Tarantino sollen auf die Onlinemarketingkonferenz OMR locken. Zehntausende reden über Werbestrategien, Cookie-loses Tracking, NFTs.  ( 5 min )

Schon 24. Mai 2022 findet die neue Online-Konferenz zur Cross-Plattform-Entwicklung mit dem Flutter-Toolkit statt. Wer jetzt bucht, kann noch live dabei sein.  ( 3 min )

Red Hat bleibt seiner Community-Strategie treu: Wie beim Vorbild RHEL bekommt auch das Kubernetes-Sicherheits-Produkt RHACS zur KubeCon ein Open-Source-Pendant.  ( 3 min )

Live-Untertitel, Türerkennung, Apple Watch Mirroring und mehr: Apple nennt erste Funktionen, die Teil der Betriebssysteme iOS 16, macOS 13 und watchOS 9 werden.  ( 4 min )

Mit Arubas ClearPass Policy Manager können Administratoren die Zugangskontrolle regeln. Sicherheitslücken darin ermöglichen Angreifern die komplette Übernahme.  ( 4 min )

Abos in iOS-Apps können nun um bis zu 50 Prozent ohne Zustimmung des Nutzers verteuert werden. Mehrere Apple-Vorgaben sollen Missbrauch erschweren.  ( 4 min )

Das neue Release von awork führt unter anderem private Projekte ein und ermöglicht eine Automatisierung auf Projektebene.  ( 4 min )

Die pandemiebedingten Entwicklungen in den deutschen Büros sind nachhaltig, meint der Branchenverband Bitkom auf Basis einer aktuellen Umfrage.  ( 4 min )

Die integrierte Remotehilfe von Windows 10 und 11 erreicht jetzt ihr Support-Ende. Microsoft bietet im Store einen Ersatz an – und erregt die Gemüter.  ( 4 min )

Eine Woche nachdem Costa Rica den Cyber-Notstand ausgerufen hat, verschärft die Hackergruppe Conti die Drohungen. Sie wolle die Regierung stürzen.  ( 4 min )

SUSE baut seine Aktivitäten im Container-Umfeld aus. Rancher bekommt Sicherheitsfunktionen und das Projekt Open Zero Trust wird an die CNCF übergeben.  ( 3 min )

Die Software zum Planen und Verteilen von Workloads im Bereich Machine Learning und Big Data zielt auf lange laufende Jobs unter anderem in Kubernetes.  ( 4 min )

Weil er Zugangsdaten zu IT-Systemen rund um den Globus auf einem Darknet-Marktplatz verhökert hat, wurde ein Ukrainer nun zu vier Jahren Haft verurteilt.  ( 4 min )

Das neue Kali Linux ist da. Dank Snapshots kann man das System nun zurücksetzen. Neue Tools erweitern den Funktionsumfang.  ( 3 min )

Viele der Mittelständler führen laut "Deutschland sicher im Netz" keine Angriffserkennung gegen Cyberattacken durch, die Hälfte verschlüsselt E-Mails nicht.  ( 4 min )

Keine Abgase, leise, kein Schalten. Auch die bayerische Polizei ist vereinzelt schon elektrisch unterwegs – bislang aber nur auf vier Rädern.  ( 4 min )

Keine Abgase, leise, Automatikgetriebe. Auch die bayerische Polizei ist vereinzelt schon elektrisch unterwegs – bislang aber nur auf vier Rädern.  ( 4 min )

Neben iOS 15.5 liefert Apple auch neue Betriebssysteme für Mac, Apple TV, Apple Watch, HomePod und das Studio Display.  ( 4 min )

Mit gezielten Maßnahmen lassen sich Social-Media-Auftritte von Organisationen besser gestalten. Unser Workshop liefert praxisnah das nötige Rüstzeug.  ( 4 min )

Um sein Atomwaffenprogramm zu finanzieren, setzt Nordkorea auch auf Entwickler, die aus der Ferne für westliche Unternehmen arbeiten, warnen die USA.  ( 4 min )

Ab sofort können sich Python-Experten mit Talks und Workshops für die diesjährige Auflage der Konferenz für Python in Business, Web und DevOps bewerben.  ( 3 min )

Wer sich zu wichtigen IT-Themen weiterbilden möchte, kann noch bis Sonntag beim Kauf der Videokurse in der heise Academy kräftig sparen.  ( 5 min )

Das deutsche Digitalministerium wartet noch auf Listen, um die Ukraine mit IT-Hardware zu unterstützen. Die Initiative KeepUkraineConnected ist da weiter.  ( 5 min )

Das deutsche Militär kann nicht geschützt kommunizieren. Darunter leidet bereits die Zusammenarbeit mit den NATO-Partnern, kritisiert Alfons Mais.  ( 4 min )

Für den Verbraucherschutz war das 2021 novellierte Telekommunikationsgesetz ein Schritt nach vorn. Zufrieden sind Verbraucherschützerinnen längst noch nicht.  ( 4 min )

Utilizing icons in user interface elements is helpful. In addition to element labeling, icons can help reinforce a user element’s intention to users. But I have to say, I notice a bit of icon misalignment while browsing the web. Even … Improving Icons for UI Elements with Typographic Alignment and Scale originally published on CSS-Tricks. You should get the newsletter.  ( 4 min )

A new variant of the macOS malware tracked as UpdateAgent has been spotted in the wild, indicating ongoing attempts on the part of its authors to upgrade its functionalities. "Perhaps one of the most identifiable features of the malware is that it relies on the AWS infrastructure to host its various payloads and perform its infection status updates to the server," researchers from Jamf Threat  ( 2 min )

The U.S. Justice Department on Monday accused a 55-year-old cardiologist from Venezuela of being the mastermind behind Thanos ransomware, charging him with the use and sale of the malicious tool and entering into profit sharing arrangements. Moises Luis Zagala Gonzalez, also known by the monikers Nosophoros, Aesculapius, and Nebuchadnezzar, is alleged to have both developed and marketed the  ( 3 min )

Traditional businesses migrating to the cloud need robust information security mechanisms. Gartner predicts that more than 95% of new digital workloads will continue to be deployed on cloud-native platforms by 2025. Robust cloud data security is imperative for businesses adopting rapid digital transformation to the cloud. While a traditional hosting model could be considered more secure, not all  ( 6 min )

Microsoft is warning of a new variant of the srv botnet that's exploiting multiple security flaws in web applications and databases to install coin miners on both Windows and Linux systems. The tech giant, which has called the new version Sysrv-K, is said to weaponize an array of exploits to gain control of web servers. The cryptojacking botnet first emerged in December 2020. "Sysrv-K scans the  ( 3 min )

More than 200 Android apps masquerading as fitness, photo editing, and puzzle apps have been observed distributing spyware called Facestealer to siphon user credentials and other valuable information.  "Similar to Joker, another piece of mobile malware, Facestealer changes its code frequently, thus spawning many variants," Trend Micro analysts Cifer Fang, Ford Quin, and Zhengyu Dong said in a  ( 3 min )

Image source: z3r00t The U.S. Cybersecurity and Infrastructure Security Agency on Monday added two security flaws, including the recently disclosed remote code execution bug affecting Zyxel firewalls, to its Known Exploited Vulnerabilities Catalog, citing evidence of active exploitation. Tracked as CVE-2022-30525, the vulnerability is rated 9.8 for severity and relates to a command injection flaw  ( 3 min )

Mit Arubas ClearPass Policy Manager können Administratoren die Zugangskontrolle regeln. Sicherheitslücken darin ermöglichen Angreifern die komplette Übernahme.  ( 4 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Anti-aging drugs are being tested as a way to treat covid Covid-19 is far more likely to kill you if you’re old. One reason is that aged immune systems struggle to cope with…  ( 4 min )

Covid-19 is far more likely to kill you if you’re old. One reason is that aged immune systems struggle to cope with infections and recover from them. So why not try drugs that make bodies young again? That’s the bold idea now being explored in clinical trials around the world, which are testing drugs that…  ( 8 min )

Let’s take a closer look at how you can create your very own WordPress site up and running created and hosted with the Elementor Cloud Website.  ( 7 min )

In this episode, we ask how one man can go from designing websites for local bands to heading up Google Fonts Knowledge. Smashing’s Vitaly Friedman talks to Elliot Jay Stocks to find out.  ( 24 min )

An extensive study looking into the top 100k ranking websites has revealed that many are leaking information you enter in the site forms to third-party trackers before you even press submit. [...]  ( 5 min )

The US Department of Justice today said that Moises Luis Zagala Gonzalez (Zagala), a 55-year-old cardiologist with French and Venezuelan citizenship residing in Ciudad Bolivar, Venezuela, created and rented Jigsaw and Thanos ransomware to cybercriminals. [...]  ( 4 min )

Apple has released security updates to address a zero-day vulnerability that threat actors can exploit in attacks targeting Macs and Apple Watch devices. [...]  ( 4 min )

An unknown threat actor is targeting German users interested in the Ukraine crisis, infecting them with a custom PowerShell RAT (remote access trojan) and stealing their data. [...]  ( 4 min )

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has removed a Windows security flaw from its catalog of known exploited vulnerabilities due to Active Directory (AD) authentication issues caused by the May 2022 updates that patch it. [...]  ( 4 min )

Offensive Security has released ​Kali Linux 2022.2, the second version in 2022, with desktop enhancements, a fun April Fools screensaver, WSL GUI improvements, terminal tweaks, and best of all, new tools to play with! [...]  ( 5 min )

Sophos has released a fix for a known issue triggering blue screens of death (aka BSODs) on Windows 11 systems running Sophos Home antivirus software after installing the KB5013943 upda [...]  ( 4 min )

The Parker-Hannifin Corporation announced a data breach exposing employees' personal information after the Conti ransomware gang began publishing allegedly stolen data last month. [...]  ( 4 min )

Windows 11 version 22H2 aka Sun Valley 2 is set to launch later this year. Unlike the original Windows 11 release, it won't be a massive update with radical design changes. Instead, Sun Valley 2 will be similar to Windows 10 Anniversary Update, so you can expect minor improvements and a few new features. [...]  ( 6 min )

Why be a customer when you can develop your own custom semiconductors Analysis  Here's something that should raise eyebrows in the datacenter world: Facebook parent company Meta has hired a veteran networking chip engineer from Intel to lead silicon design efforts in the internet giant's infrastructure hardware engineering group.…  ( 10 min )

Report says $42b will need to be poured into industry over next decade Growing demand for lithium for batteries means the sector will need $42 billion of investment to meet the anticipated level of orders by the end of the decade, according to a report.…  ( 8 min )

Still think we're ready for that autonomous future? Autonomous cars may be further away than believed. Testing of three leading systems found that they hit a third of cyclists, and failed to avoid any oncoming cars.…  ( 8 min )

Catching compromise attempts before kicking off that recovery plan Kubecon  Veeam acquisition Kasten kicked off this year's Kubecon with an updated version of its K10 product, aimed at securing the Kubernetes container orchestration platform.…  ( 8 min )

'Most challenging element of migration likely remains' warns analyst Spanish financial giant Santander has migrated 80 percent of its core banking IT infrastructure to the cloud as part of its $20.8 billion (€20 billion ) modernization programme, with the help of in-house software created by resident developers.…  ( 8 min )

<5% figure was based on 100 accounts, if you're wondering Updated  Last week Elon Musk hit pause on his Twitter acquisition over the platform's "less than 5 percent" bot figure.…  ( 8 min )

Instagram, Microsoft responsible for lifts coming in version 3.11 and beyond The next version of the standard Python interpreter, CPython, is expected in October. It will include significant performance improvements and support for running inside the browser.…  ( 7 min )

Agenda includes warning system for disruptions, and avoiding 'subsidy race' for chip investments The EU-US Trade and Technology Council (TTC) is meeting in Paris today to discuss coordinated approaches to global supply chain issues.…  ( 8 min )

Plus: DeepMind launches new generalist AI system, and Apple boffin quits over return-to-work policy In brief  Facial recognition bans passed by US cities are being overturned as law enforcement and lobbyist groups pressure local governments to tackle rising crime rates.…  ( 9 min )

Arm shows us that even total domination doesn't always make stupid levels of money Opinion  Interviews with chip company CEOs are invariably enlightening. On top of the usual market-related subjects of success and failure, revenues and competition, plans and pitfalls, the highly paid victim knows that there's a large audience of unusually competent critics eager for technical details. That's you.…  ( 9 min )

Bill McDermott thinks companies need workflow on top of enterprise apps, whether they replace them or not Interview  In a month that has seen nearly a fifth wiped from his company's share price, Bill McDermott is remarkably cheerful.…  ( 11 min )

Bye-bye bottlenecks. Hello composable infrastructure? Interview  Compute Express Link (CXL) has the potential to radically change the way systems and datacenters are built and operated. And after years of joint development spanning more than 190 companies, the open standard is nearly ready for prime time.…  ( 10 min )

Plus: Tech giants commit $30m to open-source security, miscreants breach DEA portal, and US signs cybercrime treaty In brief  San Francisco police have been using driverless cars for surveillance to assist in law enforcement investigations.…  ( 11 min )

Concerns raised over government drive to implement distinct post-Brexit policy Legal experts say UK government plans to create new data protection laws will make more work and add costs for business, while also creating the possibility of challenges to data sharing between the EU and UK.…  ( 8 min )

If I get in early and work hard, everyone will notice, right? Who, Me?  "The early bird trashes the business" is a saying that we've just made up, but could easily apply to the Register reader behind a currency calamity in today's episode of Who, Me?…  ( 8 min )

IT giant may be shifting its focus to software and services, but systems remain the foundation Analysis  At this month's Dell Technologies World show in Las Vegas, all the usual executives were prowling the keynote stages, from CEO Michael Dell to co-COOs Chuck Witten and Jeff Clark, all talking about the future of the company.…  ( 10 min )

Researchers find widespread harvesting of info without consent Tracking, marketing, and analytics firms have been exfiltrating the email addresses of internet users from web forms prior to submission and without user consent, according to security researchers.…  ( 10 min )

AA-battery-sized biological photovoltaic cell touted as ideal for IoT applications Researchers at the University of Cambridge's Department of Biochemistry have run an Arm CPU for six months using algae as a power source.…  ( 8 min )

Is state-approved Ubuntu distro how the Middle Kingdom will replace PCs with home-grown kit? China's military-derived and government-approved Linux distribution, Ubuntu Kylin, has revealed plans to target a second RISC-V platform.…  ( 8 min )

Hires external advisors to bolster decision making capacity and hints it could consider multiple buyout plans Ailing Japanese giant Toshiba has revealed it has 10 potential suitors for its possible sale.…  ( 7 min )

Markets outside China are doing better, but at home vendors have huge component stockpiles Demand for chips needed to make smartphones and PCs has dropped "like a rock" – but mostly in China, according to Zhao Haijun, the CEO of China's largest chipmaker Semiconductor Manufacturing International Corporation (SMIC).…  ( 8 min )

Mit dünnen Folien gibt Temicon fertigen Solarmodulen eine frei wählbare Farbe. Die Effizienz der PV-Zellen nimmt durch die Behandlung nicht ab – im Gegenteil.  ( 4 min )

Die Noctua Edition der GeForce RTX 3080 wird mit zwei 120-mm-Lüftern besonders leise – das Gesamtkonstrukt belegt vier PCIe-Steckplätze.  ( 4 min )

Händler können kontaktlose Zahlungen künftig per iPhone annehmen. Die Technik öffnet Apple für Dritte, ein europäischer Zahlungsdienstleister ist mit an Bord.  ( 4 min )

Das Unternehmen Elastic hat einen komplett überarbeiteten PHP-Client für das eigene Datenanalysetool angekündigt, der PHP Standards Recommendations konform ist.  ( 5 min )

Wirksame Sicherheitsvorkehrungen verspricht AWS und untermauert dies mit 18 nach C5 geprüften Ressourcen. Dies soll die Cloud für Behörden interessant machen.  ( 3 min )

Microsofts Entwicklerkonferenz Build findet in diesem Jahr auch in Präsenz in Berlin statt. Es gibt dort deutschsprache Sitzungen und Demos.  ( 3 min )

Beim dritten Thementag der Online-Konferenzreihe geht es um passende Tools und Techniken, die den gegenwärtigen Wandel der Arbeitswelt unterstützen.  ( 4 min )

Monitore sind entweder klassisch plan oder sie sind leicht gekrümmt und erlauben so mehr Immersion etwa beim Spielen. LG zeigt eine Kombi aus beiden Varianten.  ( 4 min )

Administratoren, die Trial- oder Evaluationsversionen von Windows herunterladen wollen, bekommen stattdessen Fehlermeldungen. Eine temporäre Linksammlung hilft.  ( 3 min )

Nvidia hat die Verfügbarkeit der CUDA-Version 11.7 bekanntgegeben, die neben neuen Open GPU Kernel-Modulen jetzt auch das "Lazy Loading" zu bieten hat.  ( 3 min )

Eine neue Variante des Sysrv-Botnets hat Microsoft beobachtet, die Windows- und Linux-Systeme befällt, um Kryptowährungen zu schürfen.  ( 3 min )

Die Robotikplattform RB6 bietet eine deutlich höhere KI-Leistung als frühere Modelle und soll so den Betrieb autonomer Roboter und Luftfahrzeuge ermöglichen.  ( 4 min )

Der Workshop zum weltweit meistgenutzten CMS zeigt in praktischen Übungen, wie Sie WordPress installieren und damit Webseiten aufsetzen, betreiben und warten.  ( 4 min )

Sonicwall schließt mehrere Sicherheitslücken in Firmwares von SMA-1000-Geräten und in SSL-VPN NetExtender. Angreifer könnten sich etwa Zugriff verschaffen.  ( 3 min )

Die italienische Polizei hat nach eigenen Angaben Cyberangriffe auf den Eurovision Song Contest abgewehrt. Die hätten sich primär gegen die Ukraine gerichtet.  ( 4 min )

Gezielt die Vorgaben des IT-Sicherheitsgesetzes des BSI befolgen: konkrete Starthilfe für KRITIS-Betreiber an zwei Tagen (online). Noch Plätze frei.  ( 3 min )

Die bei Hiscox Deutschland gemeldeten Cyber-Schäden hätten sich von 2020 auf 2021 fast verdoppelt.  ( 4 min )

Global styles, a feature of the block themes, is one of my favorite parts of creating block themes. The concept of global style variations in WordPress were introduced in Gutenberg 12.5 which would allow theme authors to create alternate … Creating Style Variations in WordPress Block Themes originally published on CSS-Tricks. You should get the newsletter.  ( 11 min )

A first-of-its-kind security analysis of iOS Find My function has identified a novel attack surface that makes it possible to tamper with the firmware and load malware onto a Bluetooth chip that's executed while an iPhone is "off." The mechanism takes advantage of the fact that wireless chips related to Bluetooth, Near-field communication (NFC), and ultra-wideband (UWB) continue to operate while  ( 4 min )

Are you aware of fake clickjacking bug bounty reports? If not, you should be. This article will get you up to speed and help you to stay alert. What are clickjacking bug bounty reports? If we start by breaking up the term into its component parts, a bug bounty is a program offered by an organization, in which individuals are rewarded for finding and reporting software bugs. These programs are  ( 5 min )

An unidentified threat actor has been linked to an actively in-development malware toolkit called the "Eternity Project" that lets professional and amateur cybercriminals buy stealers, clippers, worms, miners, ransomware, and a distributed denial-of-service (DDoS) bot. What makes this malware-as-a-service (MaaS) stand out is that besides using a Telegram channel to communicate updates about the  ( 3 min )

The European Parliament announced a "provisional agreement" aimed at improving cybersecurity and resilience of both public and private sector entities in the European Union. The revised directive, called "NIS2" (short for network and information systems), is expected to replace the existing legislation on cybersecurity that was established in July 2016. The revamp sets ground rules, requiring  ( 3 min )

A 28-year-old Ukrainian national has been sentenced to four years in prison for siphoning thousands of server login credentials and selling them on the dark web for monetary gain as part of a credential theft scheme. Glib Oleksandr Ivanov-Tolpintsev, who pleaded guilty to his offenses earlier this February, was arrested in Poland in October 2020, before being extradited to the U.S. in September  ( 3 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Social media platforms are still struggling to stop the spread of the Buffalo shooting video Social media platforms are still struggling to stop the spread of the video of the racist mass shooting…  ( 5 min )

One shiny premise of DeFi or decentralized finance—a catch-all term for cryptocurrencies and blockchain projects related to the exchange of value—is that by spreading out and automating operations, and removing power from middlemen like banks, it can offer a system more resilient to global forces, able to survive events like war and economic downturns that…  ( 7 min )

What makes the underused `Server-Timing` header uniquely powerful among all other response headers? We’ll rethink the expectation for using it exclusively for timing and see fast solutions for hard-to-solve monitoring challenges.  ( 17 min )

Sonicwall schließt mehrere Sicherheitslücken in Firmwares von SMA-1000-Geräten und in SSL-VPN NetExtender. Angreifer könnten sich etwa Zugriff verschaffen.  ( 3 min )

Hackers have started to exploit a recently patched critical vulnerability, tracked as CVE-2022-30525, that affects Zyxel firewall and VPN devices for businesses. [...]  ( 4 min )

A fake Pixelmon NFT site entices fans with free tokens and collectibles while infecting them with malware that steals their cryptocurrency wallets. [...]  ( 4 min )

Windows admins have been expressing their dismay at Microsoft's decision to move the Quick Assist remote assistance tool to the Microsoft Store. [...]  ( 4 min )

220 Euro für einen Laptop mit Touch-Display? Wir zeigen Windows-Notebooks, Convertible-PCs und 2-in-1-Geräte aller Preisklassen und was sie können.  ( 6 min )

Stockender Verkehr – ein Ärgernis für Autofahrer und umweltschädlich. Hessen setzt auf Digitalisierung des Stadtverkehrs, für weniger Stau und sauberere Luft.  ( 5 min )

EInk hat mit seiner elektronischen Tinte enorme Fortschritte erzielt. Jüngst zeigte das Unternehmen farbstarke Schilder und sogar ein farbiges Videodisplay.  ( 5 min )

Quantenpunkte findet man bald auch in TVs unter 500 Euro, denn die Partikel überleben nun auch in der Luft. Die Nanopartikel taugen zudem als Projektionsfläche.  ( 4 min )

In vier digitalen Live-Trainings lernen Interessierte in insgesamt 16 praxisnahen Stunden, wie sie mit TensorFlow eigene Machine-Learning-Projekte umsetzen.  ( 4 min )

An drei Terminen im Mai und Juni lernen Interessierte in 12 praxisnahen Stunden, Projektmanagement mit den Atlassian-Tools zu meistern.  ( 4 min )

Sometimes a half-sized shipping container at the base of a cell tower is all you need Analysis  Colocation facilities aren't just a place to drop a couple of servers anymore. Many are quickly becoming full-fledged infrastructure-as-a-service providers as they embrace new consumption-based models and place a stronger emphasis on networking and edge connectivity.…  ( 11 min )

For those that want to keep their data in the homeland Quantum computing outfit D-Wave Systems has announced availability of an Advantage quantum computer accessible via the cloud but physically located in the US, a key move for selling quantum services to American customers.…  ( 8 min )

A recent security update for a Windows NTLM Relay Attack has been confirmed to be a previously unfixed vector for the PetitPotam attack. [...]  ( 4 min )

Han Bing, a former database administrator for Lianjia, a Chinese real-estate brokerage giant, has been sentenced to 7 years in prison for logging into corporate systems and deleting the company's data. [...]  ( 4 min )

Online crypto scams and ponzi schemes leveraging social media platforms are hardly anything new. But, this gruesome case of a London-based crypto robber transcends the virtual realm and tells a shocking tale of real-life victims from whom the perpetrator successfully stole £34,000. [...]  ( 7 min )

Online crypto scams and ponzi schemes leveraging social media platforms are hardly anything new. But, this gruesome case of a London-based crypto robber transcends the virtual realm and tells a shocking tale of real-life victims from whom the perpetrator successfully stole £34,000. [...]  ( 7 min )

US publishes technical guide to help organizations avoid violating Americans with Disabilities Act The Biden administration and Department of Justice have warned employers using AI software for recruitment purposes to take extra steps to support disabled job applicants or they risk violating the Americans with Disabilities Act (ADA).…  ( 9 min )

Your US tax dollars at work The US Immigration and Customs Enforcement (ICE) agency has spent about $2.8 billion over the past 14 years on a massive surveillance "dragnet" that uses big data and facial-recognition technology to secretly spy on most Americans, according to a report from Georgetown Law's Center on Privacy and Technology.…  ( 9 min )

You robot kids, get off my LAN AI will completely automate the network within five years, Juniper CEO Rami Rahim boasted during the company’s Global Summit this week.…  ( 9 min )

We speak to scientists involved in historic first snap – and no, this isn't the M87* Astronomers have captured a clear image of the gigantic supermassive black hole at the center of our galaxy for the first time.…  ( 10 min )

We take a look at low, low subscription prices – not that we want to give anyone any ideas A Tor-hidden website dubbed the Eternity Project is offering a toolkit of malware, including ransomware, worms, and – coming soon – distributed denial-of-service programs, at low prices.…  ( 10 min )

Touting info on 6,700 compromised systems will get you four years behind bars A Ukrainian man has been sentenced to four years in a US federal prison for selling on a dark-web marketplace stolen login credentials for more than 6,700 compromised servers.…  ( 9 min )

2015 musste das NIST einen Verschlüsselungsalgorithmus beerdigen, da ihn die NSA unterwandert hatte. Bei Post-Quanten-Kryptografie soll das nicht passieren.  ( 5 min )

Große Online-Plattformen inklusive Netflix müssen laut EU-Rat künftig eine Infrastrukturabgabe zahlen, damit bis 2030 überall Gigabit-Anschlüsse möglich sind.  ( 5 min )

Das Asus Vivobook 13 Slate bietet als Windows-Tablet ab 590 Euro ein OLED-Display. Ob das 2-in-1-Laptop mit dem Surface mithalten kann, zeigt der Test.  ( 6 min )

Neue Raspi-Bastelprojekte: eine USB-Verlängerung übers LAN und ein Ultraschall-Zollstock. Zudem: Was der Microcontroller Raspi Pi Pico und ältere Raspis können.  ( 4 min )

Last month, a video went viral that showed a San Francisco police officer, at night, stopping a car that didn’t have its headlights on. Except that this was no ordinary car. As the cop approaches the vehicle, someone off-camera shouts, “Ain’t nobody in it!” The car, operated by Cruise, a subsidiary of General Motors, is…  ( 5 min )

Ever thought about working full-time in cybersecurity? With millions of unfilled jobs around, now is a great time to get into the industry. Of course, there are many different roles in this field. But all of them require the same handful of professional certifications. The 2022 Ultimate Advanced CyberSecurity Professional Certification Bundle helps you collect the full house, with five  ( 3 min )

SonicWall has published an advisory warning of a trio of security flaws in its Secure Mobile Access (SMA) 1000 appliances, including a high-severity authentication bypass vulnerability. The weaknesses in question impact SMA 6200, 6210, 7200, 7210, 8000v running firmware versions 12.4.0 and 12.4.1. The list of vulnerabilities is below - CVE-2022-22282 (CVSS score: 8.2) - Unauthenticated Access  ( 2 min )

While ransomware attacks have slowed during Russia's invasion of Ukraine and the subsequent sanctions, the malware threat continues to affect organizations worldwide. [...]  ( 5 min )

Italy's Computer Security Incident Response Team (CSIRT) has published an announcement about the recent DDoS attacks that key sites in the country suffered in the last couple of days. [...]  ( 4 min )

Microsoft says the Sysrv botnet is now exploiting vulnerabilities in the Spring Framework and WordPress to ensnare and deploy cryptomining malware on vulnerable Windows and Linux servers. [...]  ( 3 min )

A new RedLine malware distribution campaign promotes fake Binance NFT mystery box bots on YouTube to lure people into infecting themselves with the information-stealing malware from GitHub repositories. [...]  ( 4 min )

SonicWall "strongly urges" customers to patch several high-risk security flaws impacting its Secure Mobile Access (SMA) 1000 Series line of products that can let attackers bypass authorization and, potentially, compromise unpatched appliances. [...]  ( 4 min )

A growing number of Russian Chrome users on Android report getting errors when attempting to install the latest available update of the popular web browser. [...]  ( 4 min )

David Harville is seventh to cop to harassment campaign David Harville, eBay's former director of global resiliency, pleaded guilty this week to five felony counts of participating in a plan to harass and intimidate journalists who were critical of the online auction business.…  ( 9 min )

Nvidia, AMD, Apple et al may be forced to pass cost on to customers Just as costs for some components have started to come down, TSMC and Samsung, the two largest contract chip manufacturers in the world, are reportedly planning to increase prices of production, which may affect Nvidia, AMD, Apple, and others that rely on the foundries.…  ( 8 min )

Demand for PostgreSQL and Kafka driving interest in cloud service, CEO tells The Register Finnish open-source-as-a-service provider Aiven received $210 million in funding this week, adding $1 billion to its nominal valuation in just nine months.…  ( 8 min )

Adds infosec regulation coming to more industries but with a light touch, more collaboration Black Hat Asia  Software made unsafe by dependencies should be fixed without users needing to interact with the source of the problem, according to US National Cyber Director Chris Inglis, who serves in the Executive Office of the President.…  ( 8 min )

The idea? To get investors muttering: DRAM, those gross margins are stable... Memory and storage maker Micron Technology has revealed a new business model intended to address the volatility in the memory market that has resulted in sharp swings in pricing over the past several years.…  ( 9 min )

Nine out of ten organizations would do it all over again, keeping attackers in business Almost nine in 10 organizations that have suffered a ransomware attack would choose to pay the ransom if hit again, according to a new report, compared with two-thirds of those that have not experienced an attack.…  ( 9 min )

The internet is now the first battleground of any new war – before the shooting starts Black Hat Asia  Cyber war has become an emerged aspect of broader armed conflicts, commencing before the first shot is fired, cybersecurity expert Kenneth Geers told the audience at the Black Hat Asia conference on Friday.…  ( 8 min )

'This is not recommended for production development. It may be unstable and it will have bugs' Canonical has begun slinging daily builds of Ubuntu at Windows Subsystem for Linux. We took a look at the not-for-production code.…  ( 8 min )

Khamenei, can you just not? Not right now, fam The Iran-linked Cobalt Mirage crew is running attacks against America for both financial gain and for cyber-espionage purposes, according to Secureworks' threat intelligence team.…  ( 10 min )

Yes/No/Cancel culture at its worst Something for the Weekend  "We all know what we're doing today? Good. Do your best!"…  ( 11 min )

Less than 5% of users are spam accounts? Is that too high ... or too high for him? Elon Musk has hit the brakes on his proposed takeover of Twitter in light of the platform's insistence that spam accounts accounted for less than five percent of its daily active users.…  ( 8 min )

Farewell to scheduling your emergencies in advance Microsoft is to permit unscheduled breaks into its exams, bringing relief to students working through the often lengthy process.…  ( 8 min )

Make it work like it does at home On Call  In this week's episode of our On Call column, an exasperated Register reader nearly walks the plank after failing to break the laws of physics.…  ( 10 min )

‘Cooperative mutation’ spots problems that checking scripts alone will miss Black Hat Asia  Security researchers have devised a tool that detects flaws in the way apps like Microsoft Word and Adobe Acrobat process JavaScript, and it's proven so effective they've found 134 bugs – 59 of them considered worthy of a fix by vendors, 33 assigned a CVE number, and 17 producing bug bounty payments totaling $22,000.…  ( 9 min )

As well as chip design licensing, 5G smartphones, cars ... who needs Nvi-whatchamacallit? With Arm looking to re-enter the public market at some point, the British chip designer is hoping to get would-be investors excited with figures that indicate it achieved record revenues and profits in 2021.…  ( 9 min )

Guess you could call this Mercury Ryzen Here's a new data point that will rile Intel up: AMD now accounts for nearly 30 percent of x86 CPU market share, and the chip designer got there during an industry downturn.…  ( 9 min )

Less demand will see prices fall, and gaming laptop sales rise – which is nice as the rest of the PC market has cooled Taiwanese hardware giant ASUSTeK says demand for GPU used to mine cryptocurrency is "disappearing" – and so is about ten percent of demand for personal computers.…  ( 8 min )

Around the time Beijing banned online gambling, RATs started targeting operators, say Taiwanese researchers Black Hat Asia  Keep an eye on new Chinese government policies, if you want to anticipate malware attacks, a threat intelligence analyst suggested at the Black Hat Asia conference on Thursday.…  ( 9 min )

Reverse-engineered code redirects visitors to dodgy corners of the internet A years-long campaign by miscreants to insert malicious JavaScript into vulnerable WordPress sites, so that visitors are redirected to scam websites, has been documented by reverse-engineers.…  ( 9 min )

Yes, give those smartNICs something to do Trusted platform modules (TPMs) got a bad rap for headaches they caused some PC enthusiasts. One place they are arguably more palatable is the datacenter, or so AWS, at least, hopes with the actual, real launch of its NitroTPM for Elastic Compute Cloud (EC2).…  ( 9 min )

OK includes an outage, plummeting cryptocurrencies, falling stock price Coinbase CEO Brian Armstrong has scrambled to alleviate fears that customers storing cryptocurrencies at the digital cash exchange will lose everything if the biz goes under.…  ( 9 min )

Microsoft probes complaints of domain controller headaches Microsoft is warning a security update may cause authentication failures for Windows domain controllers.…  ( 9 min )

If your stock or crypto-coin holdings look like crap today, this might help you feel better SoftBank lost a lot of money over the past 12 months.…  ( 8 min )

Überwachungskameras mit zusätzlichen LEDs können bei Bewegungserkennung oder dauerhaft für Licht sorgen. Je nach Einsatzzweck gibt es unterschiedliche Modelle.  ( 6 min )

Nachzügler: Die grafische Anwendung zur Verwaltung von Containern, Volumes und Images erscheint nach Windows und macOS auch für den Linux-Desktop.  ( 4 min )

Ab sofort lassen sich EC2-Systeme mit einer virtuellen TPM-Implementierung sowie UEFI-Support einrichten. Zum Start sind Linux- und Windows-VMs mit an Bord.  ( 3 min )

Die Organisatoren des Cloud Native Community Festival heißen auch die Jakarta-Gemeinde willkommen zum offiziellen JakartaOne Livestream am 30. Juni 2022.  ( 5 min )

Unsere Übersicht kleiner, aber interessanter Meldungen enthält diese Woche unter anderem Eclipse Theia, Solr, TypeScript, WildFly, Google, O3DE und Komodor.  ( 4 min )

Unser werktäglicher News-Überblick fasst die wichtigsten Nachrichten des Tages kurz und knapp zusammen.  ( 4 min )

Vor über einem halben Jahr hat Microsoft Windows 11 veröffentlicht. Wurden die größten Kritikpunkte inzwischen behoben?  ( 8 min )

Bei der Luca-App und der Sormas-Schnittstelle zur Kontaktnachverfolgung sei der Datenschutz laut der Beauftragten für Brandenburg zu kurz gekommen.  ( 4 min )

Mehrere Macs und iPads mit einer Tastatur und Maus bedienen: In macOS 12.4 erklärt Apple die Entwicklung von Universal Control als abgeschlossen.  ( 4 min )

Über die Website zensus2022.de erfasst Destatis sensible Bürgerdaten. Nun stellt sich heraus, dass ausgerechnet der US-Dienst Cloudflare eingebunden ist.  ( 5 min )

In der aktuellen Insider-Preview für Windows 11 probiert sich Microsoft mit "Suggested Actions" an kontextsensitiven Aktionen für Telefonnummern und Daten.  ( 4 min )

Ein Vorserienmodell eines Zen-4-Achtkerners erreichte Taktfrequenzen jenseits der 5 GHz und verwendete eine integrierte Grafikeinheit.  ( 3 min )

Mit dem Cluster API Provider für das Open-Source-Projekt vcluster lassen sich virtuelle Kubernetes-Cluster auf die gleiche Weise bereitstellen wie physische.  ( 3 min )

Im Rahmen des Release 13 basiert TrueNAS nun auf einem aktuellen FreeBSD und packt vor allem die Geschwindigkeit des Open-Source-NAS-Systems an.  ( 6 min )

Sonys Playstation nutzt zumindest Teile von NetBSD. Eine Treiber-Sicherheitslücke könnte Angreifern aus dem LAN ermöglichen, eigenen Code einzuschleusen.  ( 4 min )

Dem Betreiber des Ölpipelinesystems droht eine hohe Geldstrafe. Fehlendes Notfallmanagement war wohl mitursächlich für die Ransomware-Auswirkungen 2021.  ( 4 min )

Der KI-Agent von DeepMind kann Atari spielen, Textanweisungen befolgen, Bilder beschriften, chatten und einen Roboterarm kontrollieren – aus einem Transformer.  ( 5 min )

Auch unabhängig von den jüngsten Preisstürzen kaufen Mining-Farmen weniger Grafikkarten – aus Vorsicht, wie es mit dem Schürfen von Ethereum weitergeht.  ( 4 min )

Wer sein Gerät im Rahmen des neuen iPhone Self Service Repair Program instand setzen will, benötigt besondere Hardware. Die lässt sich mieten.  ( 4 min )

Das Update des Datenformats für Simulationsstandards bringt Neuerungen für Co-Simulation und baut die Arbeit mit Digital Twins auf Systemebene weiter aus.  ( 4 min )

ServiceNow hält seine Hausmesse ab und will mit neuen Tools das IT-Service-Management sowie Behördengänge verbessern.  ( 3 min )

Eine Sicherheitslücke in der Desktop-Firewall ZoneAlarm könnte Angreifern ermöglichen, ihre Rechte im System auszuweiten und somit die Kontrolle zu übernehmen.  ( 3 min )

Mit Blick auf die wachsenden Gefahren für die Software Supply Chain ernennt die Stiftung Mikaël Barbero zum Head of Security.  ( 4 min )

Microsoft-Updates aus dem Mai verursachen bei Nutzern Probleme etwa beim Starten bestimmter Anwendungen. Zudem können Dienste Authentifizierungsprobleme melden.  ( 4 min )

Ein wichtiges Sicherheitsupdate schließt eine kritische Lücke in mehreren Firewall-Modellen von Zyxel.  ( 3 min )

Auf der diesjährigen Google I/O hat das Unternehmen neben der Version 3 des Frameworks Flutter auch ein neues Dart SDK mit Versionsnummer 2.17 angekündigt.  ( 4 min )

Am 18. Mai 2022 findet ein halbtägiges Webinar zu Threat Modeling statt. Ein Workshop am 23. Mai vertieft das Thema praxisorientiert.  ( 3 min )

Thank you for joining us on “The cloud hub: From cloud chaos to clarity.” Read this conversation with Matthias Haberstroh, director of supply chain management at ZF Group, where he discusses the pandemic’s impact on the digitalization of the automotive supply chain and how it will define the future of the industry. Click here to…  ( 1 min )

Thank you for joining us on “The cloud hub: From cloud chaos to clarity.” Contact centers hold significant value for businesses, but they often have to deal with a disengaged workforce and unsatisfied customers. New AI systems can help contact centers become future-ready with a smarter workforce, happier customers, and stronger finances. Click here to…  ( 1 min )

Thank you for joining us on “The cloud hub: From cloud chaos to clarity.” The transformative potential of algorithmic systems, the reach of their effects, combined with the paucity of supervision, can bring certain reputational, financial, and ethical risks. Responsible AI is required to provide assurance to users and build continuous trust in AI-based systems.…  ( 1 min )

Thank you for joining us on “The cloud hub: From cloud chaos to clarity.” Watch this panel discussion to hear experts explain how global manufacturers can harness the power of data and analytics on top of cloud. Panel experts include: Scott Anderson, director of IT, enterprise architecture, and BI/data analytics apps, and automation CoE at…  ( 2 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. A quick guide to the most important AI law you’ve never heard of It’s a Wild West out there for artificial intelligence. AI applications are increasingly used to make important decisions about humans’…  ( 4 min )

It’s a Wild West out there for artificial intelligence. AI applications are increasingly used to make important decisions about humans’ lives with little to no oversight or accountability. This can have devastating consequences: wrongful arrests, incorrect grades for students, and even financial ruin. Women, marginalized groups, and people of color often bear the brunt of…  ( 6 min )

In my last article we saw how CSS background properties allow us to create cool hover effects. This time, we will focus on the CSS text-shadow property to explore even more interesting hovers. You are probably wondering how adding shadow … Cool Hover Effects That Use CSS Text Shadow originally published on CSS-Tricks. You should get the newsletter.  ( 7 min )

Google on Thursday announced the creation of a new "Open Source Maintenance Crew" to focus on bolstering the security of critical open source projects. Additionally, the tech giant pointed out Open Source Insights as a tool for analyzing packages and their dependency graphs, using it to determine "whether a vulnerability in a dependency might affect your code." "With this information, developers  ( 2 min )

A spear-phishing campaign targeting Jordan's foreign ministry has been observed dropping a new stealthy backdoor dubbed Saitama. Researchers from Malwarebytes and Fortinet FortiGuard Labs attributed the campaign to an Iranian cyber espionage threat actor tracked under the moniker APT34, citing resemblances to past campaigns staged by the group. "Like many of these attacks, the email contained a  ( 3 min )

Zyxel has moved to address a critical security vulnerability affecting Zyxel firewall devices that enables unauthenticated and remote attackers to gain arbitrary code execution. "A command injection vulnerability in the CGI program of some firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device," the company said in an advisory  ( 3 min )

Sonys Playstation nutzt zumindest Teile von NetBSD. Eine Treiber-Sicherheitslücke könnte Angreifern aus dem LAN ermöglichen, eigenen Code einzuschleusen.  ( 4 min )

Eine Sicherheitslücke in der Desktop-Firewall ZoneAlarm könnte Angreifern ermöglichen, ihre Rechte im System auszuweiten und somit die Kontrolle zu übernehmen.  ( 3 min )

Ein wichtiges Sicherheitsupdate schließt eine kritische Lücke in mehreren Firewall-Modellen von Zyxel.  ( 3 min )

We waste so much today. One way of focusing on what truly matters is by identifying Top Tasks for yourself. Learn how to make tough decisions by focusing on the real, quantifiable evidence that will help create a better experience for your users.  ( 11 min )

Threat analysts have spotted a novel attack attributed to the Iranian hacking group known as APT34 group or Oilrig, who targeted a Jordanian diplomat with custom-crafted tools. [...]  ( 4 min )

Glib Oleksandr Ivanov-Tolpintsev, a 28-year-old from Ukraine, was sentenced today to 4 years in prison for stealing thousands of login credentials per week and selling them on a dark web marketplace. [...]  ( 3 min )

Threat actors have launched the 'Eternity Project,' a new malware-as-a-service where threat actors can purchase a malware toolkit that can be customized with different modules depending on the attack being conducted. [...]  ( 4 min )

Threat analysts who discovered a vulnerability affecting multiple Zyxel products report that the network equipment company fixed it via a silent update pushed out two weeks ago. [...]  ( 4 min )

Threat analysts who discovered a vulnerability affecting multiple Zyxel products report that the network equipment company fixed it via a silent update pushed out two weeks ago. [...]  ( 4 min )

A recently discovered backdoor malware called BPFdoor has been stealthily targeting Linux and Solaris systems without being noticed for more than five years. [...]  ( 7 min )

NVIDIA has published the source code of its kernel modules for the R515 driver, using a dual licensing model that combines the GPL and MIT licenses, making the modules legally re-distributable. [...]  ( 4 min )

Historic Hotel of America serving up modern malware to their guests. Why securing your inbox with more than just anti-malware engines is needed to prevent cybercrime attacks. [...]  ( 6 min )

Microsoft is investigating a known issue causing authentication failures for some Windows services after installing updates released during the May 2022 Patch Tuesday. [...]  ( 4 min )

Microsoft is testing a new 'Suggested Actions' feature in Windows 11 Dev builds where the operating system suggests actions you can take with data you copy into the clipboard. [...]  ( 3 min )

So. Many. BIOS. Bugs Intel has disclosed high-severity bugs in its firmware that's used in datacenter servers, workstations, mobile devices, storage products, and other gear. These flaws can be exploited to escalate privileges, leak information, or stop things from working.…  ( 9 min )

That bit in Ghostbusters when they shut off the containment unit? That, but with social networks On Wednesday, the US Fifth Circuit Court of Appeals decided to undo a preliminary injunction that for the past few months has been blocking Texas's law prohibiting online content moderation while that legislation is being challenged.…  ( 9 min )

Team Xeon reveals 'Trust-as-a-Service' while Google Cloud details deeper ties with Team Zen Analysis  As cloud service providers increasingly look to x86 architecture alternatives, Intel and AMD are trying to find ways to gain or hold favor in the market – and this includes baking in security features and forming services and partnerships.…  ( 12 min )

German software giant reprises old motifs at annual show Sapphire SAP has attempted to energize its annual Sapphire shindig by expounding the virtues of its strategy since €28 billion was wiped off the company's value in 2020 due to the pandemic.…  ( 9 min )

Latest version of Red Hat's free distro family arrives, a day after the paid one Version 36 of the free community distro sponsored by Red Hat is here – but there's a lot more to Fedora 36 than just the well known desktop distro with its different desktop spins.…  ( 10 min )

CEO points to two very different multi-cloud markets, says it's already spoken to potential buyer Rackspace Technology is considering selling off at least part of its business following a strategic review, with CEO Kevin Jones admitting that "everything is on the table."…  ( 8 min )

Lincoln College shuttering after 157 years, ransomware attack from Iran final straw A December attack against a long-standing college in Illinois has pushed the institution to permanently close. …  ( 7 min )

It looks like you've copied a phone number, would you like help? The Windows Insider Dev Channel has introduced a feature it is calling "Suggested Actions" to the work-in-progress build of Windows 11, and testers love it so much they are already asking how to turn it off.…  ( 7 min )

Startup aims to add more than 150 workers by the end of 2022 Cloud storage company Panzura has received an $80 million injection in a Series B funding round, which CEO Jill Stelfox says it'll use to build a "different" kind of storage company.…  ( 8 min )

DigitalBridge Group and global infrastructure investor IFM Investors to acquire all outstanding shares US datacenter operator Switch Inc is to be purchased by private investors led by DigitalBridge Investment Management in an all-cash transaction for approximately $11 billion.…  ( 7 min )

Analysts also insist organizations need to get data ops for AI in gear or face 2-year delay By 2025, half of analytics will be developed by business users via a low-code or no-code modular assembly experience, according to Gartner.…  ( 8 min )

Microsoft embraces Nuance to deepen its healthcare connections Microsoft's purchase of AI company Nuance got Redmond's foot in the door of the healthcare industry, and it's widening the opening as Nuance helps form an industry group to explore applications of AI in hospitals and clinics.…  ( 7 min )

Please season with pinches of salt as necessary Apple may ditch its exclusive Lightning port in favor of the more widely used USB-C for future iPhone models.…  ( 7 min )

In fact, most of them are great people Opinion  You might be excused if you think most Linux and open-source leaders are, ah, rude.…  ( 10 min )

Launches almost 1,000 raids, plenty with upgraded malware Black Hat Asia  The advanced persistent threat gang known as SideWinder has gone on an attack spree in the last two years, conducting almost 1,000 raids and deploying increasingly sophisticated attack methods.…  ( 8 min )

Pasqal to provide compute based on approaches by Qu&Co acquisition BMW has become the latest company to give quantum an early chance, with the goal of shrinking development cycles beyond traditional means.…  ( 9 min )

'Mischief abroad' is the Middle Kingdom's goal – without the possibility of using Chinese sites to fight back Black Hat Asia  The time has come to remove Chinese voices from global social media, according to Samir Saran, president of Delhi-based think tank Observer Research Foundation (ORF), a commissioner of The Global Commission on the Stability of Cyberspace, and a member of Microsoft's Digital Peace Now Initiative.…  ( 8 min )

If we're gonna go through this again, can we just literally go back in time? Proposed Europe regulations that purport to curb child abuse by imposing mass surveillance would be a "disaster" for digital privacy and strong encryption, say cybersecurity experts.…  ( 9 min )

Private orgs that flex with Russian bans may do more harm – to themselves – than good Black Hat Asia  The war in Ukraine, and the Declaration for the Future of the Internet signed by 60 nations in late April, should be understood in the context of a global effort to recruit the nations of the world into blocs with different attitudes to internet governance.…  ( 9 min )

A Turing point for the graphics chip giant, perhaps? Nvidia on Wednesday published the R515 driver release of its Linux GPU kernel modules under an open source, dual GPL/MIT license.…  ( 9 min )

Snyk, JFrog, ReversingLabs spend weeks investigating modules that turn out to be pen-test code Malicious packages in the NPM Registry that security researchers for weeks believed were being used to stage supply-chain attacks against prominent industrial companies in Germany turned out to be part of a penetration test run by a cybersecurity company.…  ( 10 min )

Your essential de-hyped guide to what the Chocolate Factory teased at developer shindig Google IO  Google I/O, the ad biz's annual developer conference, returned to the Shoreline Amphitheater in California's Mountain View on Wednesday, for the first time in three years. The gathering remained largely a remote event due to the persistence of COVID-19 though there were enough Googlers, partners, and assorted software developers in attendance to fill venue seats and punctuate important points with applause.…  ( 11 min )

Der 128-Kern-Prozessor der erst 2016 gegründeten Firma soll mehrfach schneller rechnen als AMD Epyc, Intel Xeon und Nvidia Hopper.  ( 4 min )

Apple kann MacBook Air und Pro wohl erst wieder ab Juli liefern. Auch bei anderen Produkten gibt es lange Wartezeiten. Der Konzern erwartet Milliardeneinbußen.  ( 4 min )

Die GPUs in AMDs Kombiprozessoren Ryzen 6000 übertragen 40 Gbit/s über DisplayPort 2.0 – etwa für 4K-Monitore mit hoher Bildwiederholrate.  ( 4 min )

GitHub kündigt erweiterte 2FA-Absicherung für npm-Accounts an. Zuvor sei der Account hinter dem Package foreach von einer Übernahme bedroht gewesen.  ( 4 min )

Die Prozessorenhersteller AMD und Intel beheben Sicherheitslücken. Rechnerhersteller müssen zum Abdichten zumeist BIOS-Updates verteilen.  ( 4 min )

Ein scheinbar bösartiger Supply-Chain-Angriff auf vier Firmen hat sich als Penetrationstest herausgestellt, zeigt aber die anhaltende Gefahr der Attacken.  ( 4 min )

Verkaufen lohnt nicht mehr, zum Wegwerfen zu schade: Alte Apple-Hardware landet oft in der Schublade, dabei gibt es viele interessante Einsatzmöglichkeiten.  ( 3 min )

Wer sich zu wichtigen IT-Themen weiterbilden möchte, kann für kurze Zeit beim Kauf der Videokurse in der heise Academy kräftig sparen.  ( 5 min )

Das Release bringt eine WebAuthn Extension zur passwortlosen Authentifizierung im Preview-Status mit, ebenso wie Voreinstellungen für OpenID Connect.  ( 3 min )

Welche Apotheken E-Rezepte verarbeiten können, zeigt die für die Digitalisierung des Gesundheitssystems zuständige Gematik GmbH mithilfe einer Deutschlandkarte.  ( 4 min )

Nvidia hat angekündigt, die Linux-Kernel-Module für seine GPUs künftig unter den offenen Lizenzen GPL und MIT dual-lizenziert zur Verfügung zu stellen.  ( 6 min )

Reality Labs steht im Mittelpunkt von Metas Metaverse. Um sich besser darauf konzentrieren zu können und Kosten einzusparen, sollen andere Projekte entfallen.  ( 4 min )

Die JavaScript-Konferenz findet in diesem Jahr wieder vor Ort in Darmstadt statt. Neben den 35 Vorträgen und vier Workshops stehen nun auch die Keynotes fest.  ( 4 min )

heise Developer präsentiert software-architektur.tv, Eberhard Wolffs Videocast. Thema diesmal: das umstrittene Wasserfallmodell und seine Mythen.  ( 3 min )

Die Verantwortung für eins der populärsten Testwerkzeuge für JavaScript wandert von Meta zu der unter dem Dach der Linux Foundation geführten OpenJS Foundation.  ( 5 min )

Wer einen PC von HP besitzt, sollte die Firmware aus Sicherheitsgründen auf den aktuellen Stand bringen.  ( 3 min )

In fünf digitalen Live-Trainings lernen Interessierte in insgesamt 20 praxisnahen Stunden, wie sie die tägliche Arbeit mit dem SQL Server meistern  ( 4 min )

Beim FTTH/B-Ausbau erscheint die vom BMDV angestrebte Ausbauquote von 50 Prozent bis Ende 2025 realistisch - doch die Telekom könnte noch auf die Bremse treten.  ( 4 min )

Hacker können Kundendaten und Code aus Apps stehlen. Unser Online-Workshop vermittelt praxisnah, wie Sie Ihren Quellcode gegen Reverse-Engineering verteidigen.  ( 4 min )

Rund um den nächsten POD bieten Profis zwei Workshops: Wirkungsvolle OKRs und Kommunikation als Product Owner. Das Kombiticket umfasst zudem Konferenzvideos.  ( 5 min )

Dem bayerischen Heimatminister ist die Mindestbandbreite von 10 Mbit/s im Download zu wenig, um es als "schnelles Internet" zu bezeichnen.  ( 4 min )

Der Angriff Russlands auf die Ukraine hat auch die Bewertung von Firmen deutlich verändert. Energieanbieter erhalten Zulauf, Konzerne wie Apple verlieren.  ( 4 min )

Geo-political tensions and digital transformation—which continue to reshape production and assembly processes across various industries—have exposed vulnerabilities in the traditional “just-in-time” (JIT) supply-chain model in the last few years. Pioneered in Japan and popularized by Toyota in the 1970s, the JIT method aims to avoid excess inventory by ordering products and raw materials only when…  ( 6 min )

The supermassive black hole at the heart of our Milky Way galaxy has been photographed for the first time, giving astronomers invaluable insight into how black holes interact with their surroundings. The object, known as Sagittarius A*, was captured by the Event Horizon Telescope Collaboration, the same global team that took the famous first-ever picture…  ( 3 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Google is failing to enforce its own ban on ads for stalkerware Google Search displays advertisements for stalkerware services that boast real-time monitoring of romantic partners and spouses, despite the company’s self-imposed ban…  ( 4 min )

Google Search displays advertisements for stalkerware services that boast real-time monitoring of romantic partners and spouses, despite the company’s self-imposed ban on such ads.  According to research by mobile security firm Certo Software and confirmed by MIT Technology Review, Google Search queries related to tracking partners such as a wife or girlfriend commonly return ads…  ( 4 min )

Braydon Coyer recently launched a monthly CSS art challenge. He actually had reached out to me about donating a copy of my book Move Things with CSS to use as a prize for the winner of the challenge — … A CSS Slinky in 3D? Challenge Accepted! originally published on CSS-Tricks. You should get the newsletter.  ( 11 min )

A ransomware group with an Iranian operational connection has been linked to a string of file-encrypting malware attacks targeting organizations in Israel, the U.S., Europe, and Australia. Cybersecurity firm Secureworks attributed the intrusions to a threat actor it tracks under the moniker Cobalt Mirage, which it said is linked to an Iranian hacking crew dubbed Cobalt Illusion (aka APT35,  ( 3 min )

The European Commission on Wednesday proposed new regulation that would require tech companies to scan for child sexual abuse material (CSAM) and grooming behavior, raising worries that it could undermine end-to-end encryption (E2EE). To that end, online service providers, including hosting services and communication apps, are expected to proactively scan their platforms for CSAM as well as  ( 4 min )

Cybersecurity researchers have disclosed a massive campaign that's responsible for injecting malicious JavaScript code into compromised WordPress websites that redirects visitors to scam pages and other malicious websites to generate illegitimate traffic. "The websites all shared a common issue — malicious JavaScript had been injected within their website's files and the database, including  ( 3 min )

Google on Wednesday took to its annual developer conference to announce a host of privacy and security updates, including support for virtual credit cards on Android and Chrome. "When you use autofill to enter your payment details at checkout, virtual cards will add an additional layer of security by replacing your actual card number with a distinct, virtual number," Google's Jen Fitzpatrick  ( 3 min )

In recent months, a cybercriminal gang known as LAPSUS$ has claimed responsibility for a number of high-profile attacks against technology companies, including: T-Mobile (April 23, 2022) Globant  Okta Ubisoft Samsung Nvidia Microsoft Vodafone In addition to these attacks, LAPSUS$ was also able to successfully launch a ransomware attack against the Brazilian Ministry of Health. While  ( 5 min )

Multiple cybersecurity authorities from Australia, Canada, New Zealand, the U.K., and the U.S. on Wednesday released a joint advisory warning of threats targeting managed service providers (MSPs) and their customers. Key among the recommendations include identifying and disabling accounts that are no longer in use, enforcing multi-factor authentication (MFA) on MSP accounts that access customer  ( 3 min )

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the recently disclosed F5 BIG-IP flaw to its Known Exploited Vulnerabilities Catalog following reports of active abuse in the wild. The flaw, assigned the identifier CVE-2022-1388 (CVSS score: 9.8), concerns a critical bug in the BIG-IP iControl REST endpoint that provides an unauthenticated adversary with a method to  ( 3 min )

Researchers have detailed a previously undocumented .NET-based post-exploitation framework called IceApple that has been deployed on Microsoft Exchange server instances to facilitate reconnaissance and data exfiltration. "Suspected to be the work of a state-nexus adversary, IceApple remains under active development, with 18 modules observed in use across a number of enterprise environments, as  ( 3 min )

Die Prozessorenhersteller AMD und Intel beheben Sicherheitslücken. Rechnerhersteller müssen zum Abdichten zumeist BIOS-Updates verteilen.  ( 4 min )

Wer einen PC von HP besitzt, sollte die Firmware aus Sicherheitsgründen auf den aktuellen Stand bringen.  ( 3 min )

In this article, Dan Shappir analyzes the performance cost associated with various frameworks and explains the wide variety of framework and platform choices that are currently available to front-end and fullstack developers.  ( 15 min )

We can think of one thing the S stands for in some unfortunate cases Miscreants are targeting managed service providers (MSPs) to break into their customers' networks and deploy ransomware, steal data, and spy on them, the Five Eyes nations' cybersecurity authorities have formally warned in a joint security alert.…  ( 9 min )

Human-free seafaring isn't going swimmingly The crewless AI-powered Mayflower ship, which was on its second attempt to cross the Atlantic ocean alone, is being hauled back to shore after suffering a mechanical failure.…  ( 8 min )

v3.0 has also gained a Casual Games Toolkit Google I/O  Google's Flutter development framework finally achieved its cross-platform aspirations with a stable release of Linux and macOS support.…  ( 11 min )

Records for revenue, gross margin in Q1 as others take a hit While some chipmakers have reported a hit to their revenue due to COVID-19 lockdowns in China and other effects, New York-based GlobalFoundries said its business stood strong in the face of various global disruptions.…  ( 8 min )

Classical internetworking and standards matter less, now that CDNs and private networks dominate traffic Analysis  The internet has become smaller – the result of a necessary re-thinking of when and where to use the net's original architecture. But in the process it may also have further concentrated power in the hands of giant technology companies.…  ( 13 min )

Plus: iXsystems' NAS OS has a new Linux-based sibling called SCALE BSD vendor iXsystems has released the latest version of its FreeBSD-derived Network Attached Storage (NAS) OS, TrueNAS 13.0.…  ( 9 min )

Slips some extra grunt into Snapdragon X70 5G chipset before devices launch Qualcomm has updated its Snapdragon X70 5G chipset to extend range and balance the transmit power for better performance. It also claims the Snapdragon modem will be the first to support a standalone 5G mmWave connection once it is available.…  ( 8 min )

RHEL, RHEL, RHEL, how about that? We talk to founder about HPC, open source and more Interview  CIQ, founding sponsor and services partner of Rocky Linux – a community build of Red Hat Enterprise Linux (RHEL) – is to receive a $26m injection of private funding led by Two Bear Capital.…  ( 8 min )

The progress bar of lies reborn as a cheery 'Checking' message Microsoft Visual Studio appears to be having a bad Wednesday with users of the development suite forced to jump into Microsoft's feedback forum to complain about prolonged problems with the software's installer.…  ( 7 min )

Secureworks' investigation only the latest evidence Kaseya and JBS attackers are on the move again New ransomware samples analyzed by Secureworks' threat intelligence team are the latest indication that high-profile ransomware operation REvil is once again up and running after months of relative inactivity.…  ( 8 min )

Going for a walk: Good. Doomscrolling: Bad What are your peers doing to stave off burnout? Research from Stack Overflow suggests about half of developers are still spending their breaks in front of a screen.…  ( 8 min )

eVocore processor line aimed at high-performance, real-time compute applications MIPS is back, but this time the company is bringing processors to market based on the RISC-V open instruction set architecture, rather than the MIPS architecture the chip designer is synonymous with.…  ( 8 min )

Link between compliance and sales appeared to boost cloud performance in case disputed by Big Red A US class-action case claiming Oracle falsely inflated its cloud revenue by threatening customers with audits is set to continue after a federal judge approved the damages model proposed by the plaintiffs.…  ( 8 min )

Fire the update engines if you haven't already Microsoft has pulled the plug on support for .NET 5 and the Pro and Home versions of Windows 10 20H2.…  ( 8 min )

By 2030 we'll be shipping 1.2 billion cellular-module devices each year, says analyst 4G will continue to be the dominant cellular connectivity technology used by IoT devices until 2028, according to a report from Counterpoint Research.…  ( 7 min )

Zero-touch provisioning, single-node deployments, and Advanced Cluster Management support confirmed Red Hat Summit  Red Hat is targeting edge deployments with fresh features across a portfolio based around containerized software deployments that build on its Enterprise Linux and OpenShift application platform.…  ( 7 min )

What goes up will also come down. The question is... how? Orbex is showing off a full-scale prototype of the Prime rocket atop its test stand at Kinloss in Scotland.…  ( 8 min )

IT and network services to replace 56 legacy workflow systems with ServiceNow UK telecoms and IT services company BT is forecasting £25 million ($30.8 million) in savings over five years by ditching some legacy applications and switching to ServiceNow workflow and automation technologies.…  ( 8 min )

30! million! users! already! moved! to! TXT! and/or! FIDO! Attacks! and! support! requests! both! down! Yahoo Japan has revealed that it plans to go passwordless, and that 30 million of its 50 million monthly active users have already stopped using passwords in favor of a combination of FIDO and TXT messages.…  ( 8 min )

Analytics veteran also cosies up to consultancies to extend market reach in IPO year Analytics industry veteran SAS has announced support for Python in its proprietary analytics studio.…  ( 8 min )

The cost of kit to capture the real world is plummeting, thanks to Apple For the past six months I've been staring at the backside of my iPhone 13 Pro wondering what possessed Apple to build a Light Detection and Ranging (LIDAR) camera into its flagship smartphone.…  ( 9 min )

Six ride sharing companies forced into consumer redress scheme India has accused ride-sharing companies of over-charging loyal customers who regularly take the same route, and directed six platforms to become part of a scheme that offers third-party grievance handling services.…  ( 8 min )

The day the music died … was probably 2007, when the iPhone made standalone music players redundant Apple has ended production of the last remaining version of the iPod – the iPod Touch.…  ( 10 min )

NUC NUC. Who's there? Intel Vision  Scale Computing announced a strategic partnership with Intel on Monday to offer a fully integrated, low-power platform for deploying and managing applications at the edge.…  ( 8 min )

Make supply chain woes work to your advantage If datacenter operators want to compete with the cloud providers, they've got to start thinking more like them. That's what Mike Bushong, VP of Datacenter Business at Juniper, told The Register.…  ( 9 min )

Plus many more flaws. And Adobe, Android, SAP join the bug-squashing frenzy Microsoft patched 74 security flaws in its May Patch Tuesday batch of updates. That's seven critical bugs, 66 deemed important, and one ranked low severity.…  ( 10 min )

And China to get first dibs when graphics chips do ship Intel Vision  The rollout of Intel's Arc discrete GPUs has been slower than expected for folks hungry for a fresh option in the computer graphics hardware market. This week, the x86 giant attempted to explain what's taking so long.…  ( 8 min )

Campaign to coax GitHub-owned outfit to improve security starts showing results Special report  Security consultant Lance Vick recently acquired the expired domain used by the maintainer of a widely used NPM package to remind the JavaScript community that the NPM Registry still hasn't implemented adequate security.…  ( 12 min )

Windows 11 users are receiving 0xc0000135 errors when attempting to launch applications after installing the recent Windows 11 KB5013943 cumulative update. [...]  ( 4 min )

The U.S. Department of Justice (DoJ) has charged Idris Dayo Mustapha for a range of cybercrime activities that took place between 2011 and 2018, resulting in financial losses estimated to over $5,000,000. [...]  ( 4 min )

Microsoft says multiple editions of Windows 10 20H2 and Windows 10 1909 have reached their end of service (EOS) on this month's Patch Tuesday, on May 10, 2022. [...]  ( 4 min )

HP has released BIOS updates today to fix two high-severity vulnerabilities affecting a wide range of PC and notebook products, which might allow arbitrary code execution. [...]  ( 4 min )

A new remote access trojan called Nerbian RAT has been discovered that includes a rich set of features, including the ability to evade detection and analysis by researchers. [...]  ( 4 min )

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a new security vulnerability to its list of actively exploited bugs, the critical severity CVE-2022-1388 affecting BIG-IP network devices. [...]  ( 4 min )

There is no doubt that open source powers our development processes, enabling software developers to build high quality, innovative products faster than ever before. But OSS also comes with its own set of risks that device manufacturers must address while leveraging its many advantages. [...]  ( 5 min )

Members of the Five Eyes (FVEY) intelligence alliance today warned managed service providers (MSPs) and their customers that they're increasingly targeted by supply chain attacks. [...]  ( 3 min )

New activity has been observed from Bitter, an APT group focused on cyberespionage, targeting the government of Bangladesh with new malware with remote file execution capabilities. [...]  ( 4 min )

Microsoft has addressed a known issue causing apps using Direct3D 9 to experience issues after installing April 2022 cumulative updates, including crashes and errors on systems using certain GPUs. [...]  ( 3 min )

Security researchers have found a new post-exploitation framework that they dubbed IceApple, deployed mainly on Microsoft Exchange servers across a wide geography. [...]  ( 4 min )

A recently disclosed F5 BIG-IP vulnerability has been used in destructive attacks, attempting to erase a device's file system and make the server unusable. [...]  ( 4 min )

AlloyDB soll als Cloud-native Datenbank Amazon Aurora Konkurrenz machen. Google verspricht Kompatibilität mit PostgreSQL – bei besserer Leistung.  ( 4 min )

Auf seiner jährlichen Entwicklerkonferenz hat Google eine Reihe von Neuerungen für Google Translate, Maps, Youtube und Co. angekündigt.  ( 4 min )

Bis 2026 will Intel seine Infrastructure Processing Units von derzeit 200 Gbit/s mit Mount Evans auf 800 Gbit/s beschleunigen.  ( 4 min )

Automatische Zusammenfassungen und Wortprotokolle, bessere Videobilder und weniger Echo  ( 5 min )

Samsung rückt auf der Display Week seine OLED-Technik ins Zentrum, es geht um Energiesparen, falt- und aufrollbare Displays und natürlich um die neuen QD-OLEDs.  ( 4 min )

Apples Lieferkette bereitet sich offenbar auf das Aus des Lightning-Ports vor: Das iPhone 15 wird angeblich auf USB-C wechseln.  ( 4 min )

Chinesische Sicherheitsforscher haben offensichtlich die Regeln der eigenen Regierung verletzt.  ( 3 min )

Ab 2025 will IBM Quantencomputer mit mehr als 4000 Qubits bauen und bis dahin erste Ansätze für eine Fehlerkorrektur bei den Ergebnissen liefern.  ( 5 min )

Angreifer nutzen Sicherheitslücken in den BIG-IP-Systemen von F5 aus, um darin einzubrechen, die Systeme unbrauchbar zu machen oder sie zu übernehmen.  ( 4 min )

Google-Sicherheitsexperten fanden mehrere Fehler in der RAM-Verschlüsselung AMD SVE des Epyc 7003 für "Confidential Computing" in der Cloud.  ( 3 min )

In ihrer von Prinz Charles vorgetragenen Ansprache an das Parlament hat die englische Königin 38 neue Gesetze angekündigt - darunter eines zum Datenrecht.  ( 4 min )

Von gedruckten Displays träumen viele seit den Anfangstagen der organischen Leuchtschichten. TCL/JDI zeigen nun ein beeindruckendes Ergebnis ihrer Kooperation.  ( 4 min )

‎Google will Nachrichten-Websites einfacher für ihre Inhalte bezahlen und ihnen dafür einen Bereich auf seiner "Search Console" einrichten.  ( 3 min )

Red Hat hat auf seinem Summit einige Neuheiten vorgestellt. Die wichtigste ist RHEL 9, das Verbesserungen für Container-Management und mehr enthält.  ( 5 min )

Wasserstandmeldung zum Supercomputer Aurora: Die Vorarbeiten sind abgeschlossen, nun könnten Intels Sapphire-Rapid-CPUs und Ponte-Vecchio-Beschleuniger kommen.  ( 4 min )

Das EU Parlament, die Kommission und die Mitgliedsstaaten sind sich einig: Mobilgeräte wie Smartphones und Tablets sollen künftig eine USB-C-Buchse haben.  ( 5 min )

In .NET 7.0 kehrt der klassische Startcode vieler Anwendungsarten mit einer Program-Klasse inklusive Main()-Methode in den Projektvorlagen zurück.  ( 5 min )

"Wissen schützt!" – die Security-Konferenz unterstützt IT-Sicherheitsverantwortliche bei ihrem Job. Nur bis nächste Woche noch zum Frühbuchertarif.  ( 3 min )

Die allgemeine Verfügbarkeit beinhaltet eine neue TPU-Einbettungs-API, die komplexe ML-basierte Ranking- und Empfehlungs-Workloads beschleunigen soll.  ( 3 min )

Um experimentelle Neuerungen ist die Linux-Distribution selten verlegen, gibt sich diesmal vergleichsweise brav. Trotz längerem Bugfixing hakelt es in Teilen.  ( 4 min )

Praxisbezogen erlernen Sie, wie man den DevSecOps-Prozess auf Anwendungsebene um automatisierte Sicherheitsprüfungen ergänzt. Mit Rabatt bis 23. Mai.  ( 3 min )

Es gibt wichtige Sicherheitsupdates für Anwendungen von Adobe. Den Großteil der Lücken stuft der Software-Hersteller als kritisch ein.  ( 3 min )

Google hat den Desktop-Webbrowser sowie die Extended-Stable-Version von Chrome aktualisiert. Die Standardversion korrigiert 13 sicherheitsrelevante Fehler.  ( 4 min )

Eine aktiv ausgenutzte Schwachstelle betrifft viele Windows- und Windows-Server-Versionen. Zwei weitere Lücken sind bekannt. Attacken könnten bevorstehen.  ( 3 min )

Zum Mai-Patchday meldet SAP acht neue Sicherheitslücken und aktualisiert Artikel zu vier Schwachstellen, die das Unternehmen bereits früher abgedichtet hat.  ( 3 min )

Lena-Sophie Müller, Initiative D21, ist der Ansicht: "Verwaltungsdigitalisierung muss daran ausgerichtet sein, dass die Menschen davon profitieren."  ( 5 min )

Ohne Internet läuft in vielen Unternehmen fast nichts mehr. Der Online-Workshop von c’t erklärt, wie Sie diese Achillesferse über Backup-Verbindungen absichern.  ( 4 min )

An espionage-focused threat actor known for targeting China, Pakistan, and Saudi Arabia has expanded to set its sights on Bangladeshi government organizations as part of an ongoing campaign that commenced in August 2021. Cybersecurity firm Cisco Talos attributed the activity with moderate confidence to a hacking group dubbed the Bitter APT based on overlaps in the command-and-control (C2)  ( 3 min )

Security and IT teams are losing sleep as would-be intruders lay siege to the weakest link in any organization's digital defense: employees. By preying on human emotion, social engineering scams inflict billions of dollars of damage with minimal planning or expertise. Cybercriminals find it easier to manipulate people before resorting to technical "hacking" tactics. Recent research reveals that  ( 3 min )

A previously undocumented remote access trojan (RAT) written in the Go programming language has been spotted disproportionately targeting entities in Italy, Spain, and the U.K. Called Nerbian RAT by enterprise security firm Proofpoint, the novel malware leverages COVID-19-themed lures to propagate as part of a low volume email-borne phishing campaign that started on April 26, 2022. "The newly  ( 3 min )

Cybersecurity researchers have discovered a number of malicious packages in the NPM registry specifically targeting a number of prominent companies based in Germany to carry out supply chain attacks. "Compared with most malware found in the NPM repository, this payload seems particularly dangerous: a highly-sophisticated, obfuscated piece of malware that acts as a backdoor and allows the  ( 3 min )

The Five Eyes nations comprising Australia, Canada, New Zealand, the U.K., and the U.S., along with Ukraine and the European Union, formally pinned Russia for masterminding an attack on an international satellite communication (SATCOM) provider that had "spillover" effects across Europe. The cyber offensive, which took place one hour before the Kremlin's military invasion of Ukraine on February  ( 3 min )

Microsoft on Tuesday rolled out fixes for as many as 74 security vulnerabilities, including one for a zero-day bug that's being actively exploited in the wild. Of the 74 issues, seven are rated Critical, 66 are rated Important, and one is rated low in severity. Two of the flaws are listed as publicly known at the time of release. These encompass 24 remote code execution (RCE), 21 elevation of  ( 4 min )

Angreifer nutzen Sicherheitslücken in den BIG-IP-Systemen von F5 aus, um darin einzubrechen, die Systeme unbrauchbar zu machen oder sie zu übernehmen.  ( 4 min )

Es gibt wichtige Sicherheitsupdates für Anwendungen von Adobe. Den Großteil der Lücken stuft der Software-Hersteller als kritisch ein.  ( 3 min )

Google hat den Desktop-Webbrowser sowie die Extended-Stable-Version von Chrome aktualisiert. Die Standardversion korrigiert 13 sicherheitsrelevante Fehler.  ( 4 min )

Eine aktiv ausgenutzte Schwachstelle betrifft viele Windows- und Windows-Server-Versionen. Zwei weitere Lücken sind bekannt. Attacken könnten bevorstehen.  ( 3 min )

Zum Mai-Patchday meldet SAP acht neue Sicherheitslücken und aktualisiert Artikel zu vier Schwachstellen, die das Unternehmen bereits früher abgedichtet hat.  ( 3 min )

According to Toshi Omagari, the author of Arcade Game Typography, the world’s first multi-colored digital font was created in 1982 for a never-released video game called Insector. Multi-colored fonts, sometimes called chromatic type, are still relatively rare on the … COLRv1 and CSS font-palette: Web Typography Gets Colorful originally published on CSS-Tricks. You should get the newsletter.  ( 8 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Russia hacked a US satellite company one hour before the Ukraine invasion What happened: Just an hour before Russian troops invaded Ukraine, Russian government hackers targeted the American satellite company Viasat, officials from the…  ( 4 min )

In this article, we will be taking a closer look at a design case study and discuss possible reasons why its customers abandon their online shopping carts and what solutions are recommended in each particular case.  ( 7 min )

And puts the usual claims of world-beating performance in its marketing Intel Vision  Intel has said it has put "desktop-caliber" silicon in a mobile package to provide its fastest 12th-generation Core laptop processors yet.…  ( 9 min )

Thank goodness someone cleared that one up The US and the European Union have officially blamed Russia for a series of destructive data-wiping malware infections in Ukrainian government and private-sector networks – and said they will "take steps" to defend against and respond to Kremlin-orchestrated attacks.…  ( 8 min )

First major release since IBM spent $34b buying distro giant, includes kernel 5.14, systemd 249, Python 3.9 and more Red Hat Summit  Red Hat has officially lifted the lid on version 9 of Red Hat Enterprise Linux (RHEL), code-named Plow, the latest major version of the dominant paid-for, commercial server Linux.…  ( 8 min )

When it comes to web giant's multi-story facilities in this specific spot, we're haters Residents in rural Culpeper County, Virginia, aren't letting Amazon build a datacenter without a fight, so they've sued the county to stop the project. …  ( 8 min )

Low-code platform providers' legal tussle ends with 'largest damages award in Virginia state court history' Appian has been awarded more than $2 billion in damages from Pegasystems for "trade secret misappropriation."…  ( 8 min )

Is spy-tech outfit trying to distract from underperforming results? Palantir's CEO invoked the specter of nuclear war as the US spy-tech company posted net losses of $101 million and revenue guidance undershot market expectations.…  ( 7 min )

One of the most battle-tested OSes out there hits commodity kit, but does anyone still care? VMS Software Inc. has announced the release of OpenVMS 9.2, the first production-supported release for commercial off-the-shelf x86 hardware.…  ( 8 min )

Updates aim to ease complexities of building applications for a hybrid cloud environment Red Hat has expanded its Red Hat Cloud Services that support the OpenShift application platform, adding new components to help with the development of hybrid applications such as a Service Registry, plus middleware to make it easier to link to cloud database services.…  ( 7 min )

Gaudi 2, Greco AI chips, plus more details on Arctic Sound-M server GPUs Intel Vision  Intel is ramping up its efforts to take on GPU giant Nvidia in the accelerated computing space with a strategy that focuses on a diverse portfolio of silicon built for different purposes.…  ( 10 min )

Big Blue claims it'll have a 4,158 qubit system by 2025 IBM Think  IBM has big plans for its quantum computing gambit, including the launch of a 4,158-qubit system by 2025. To put that in context, the company just launched it's 127-qubit "Eagle" system in 2021.…  ( 7 min )

SEO techniques employed to increase visibility of poisoned documents claims Netskope Most malware attacks now originate from the same region as the victim, according to a new report, a sign that malicious actors are changing their tactics.…  ( 7 min )

Chip giant sticking with multi-architecture ASIC/FPGA approach through 2024 Intel Vision  Intel's two-pronged ASIC/FPGA infrastructure processing unit (IPU) strategy was on full display at this week's Intel Vision event, where the chipmaker teased its upcoming 400Gbit/sec and 800Gbit/sec devices.…  ( 7 min )

Follow the blue rabbit! Graphics driver developer lead talks to The Reg Progress was made in persuading 3D graphics to work in Linux on Apple's M1 over the weekend – in the form of a blue rabbit.…  ( 7 min )

For the first time, more respondents indicate a preference for instant messaging, says SWZD The COVID-19 pandemic may trigger the end of email's dominance in business communications.…  ( 7 min )

Cites 'payment system disruption' as credit card companies pull out of region Google has begun blocking downloads of paid apps and their updates in Russia as of May 5, citing compliance issues.…  ( 7 min )

Rockets could fly from the UK as soon as next year The UK's SaxaVord spaceport has agreed a deal with Astra Space to launch satellites from the Unst facility from 2023.…  ( 7 min )

Twitter thread reveals Redmondian machinations PowerShell inventor Jeffrey Snover has aired some grievances about how his indispensable tool once got him demoted.…  ( 7 min )

A little bit of DDR5 in my life, a little bit of storage by my side, a little bit of compute is all I need Marvell Technology has announced its intent to acquire compute express link (CXL) startup Tanzanite in an all-cash deal it says will accelerate its composable infrastructure aspirations.…  ( 8 min )

Providing both old Airwave system and its replacement boosted supplier's profits, says British Home Office The UK's Home Office has admitted Motorola has "very significantly benefited" from the delay to the Emergency Services Network (ESN) because it also profits from the extension of the current Airwave communication network used by police, fire brigades and the like.…  ( 9 min )

CEO Michel Paulin on coming back from a datacenter blaze and playing nicely with others Interview  OVHcloud is perhaps best known for cloud computing, hosting, and dedicated servers in its network of datacenters but the company has also made news in other arenas. For instance, taking on Microsoft in the European courts or the fire at one of its datacenters that destroyed customer data.…  ( 11 min )

That's more than the total that are actively maintained, study claims A study has found more outdated apps in Apple's App Store and Google Play than actively updated ones. …  ( 8 min )

PCIe 5.0 device hints at servers with lots of memory, maybe shared Samsung has unveiled a 512-gigabyte Compute Express Link (CXL) DRAM module, which awaits servers to make it sing.…  ( 8 min )

Filling in a form at 4am improves infosec or privacy how, exactly? Opposition is building to India's recently introduced rules on reporting computer security breaches, which have come under fire for being impractical, ineffective, and impinging on privacy.…  ( 9 min )

Caveats apply, your privacy may vary Clearview AI has promised to stop selling its controversial face-recognizing tech to most private US companies in a settlement proposed this week with the ACLU.…  ( 9 min )

Is winter coming already for the US tech sector? Some tech companies are tightening their belts as they adjust to ongoing financial turbulence, with Uber and Meta both looking to reduce expenses and hiring.…  ( 9 min )

Privacy rules increase cost, reduce choice, slash revenues, study concludes Europe's data protection regime has reduced the number of apps available in Google Play by "a third," increased costs, and reduced developer revenues, according to a study published Monday.…  ( 11 min )

All part of a larger push by the Feds to improve cybersecurity reporting US President Joe Biden has signed into law a bill that aims to improve how the federal government tracks and prosecutes cybercrime.…  ( 9 min )

The NCSC (National Cyber Security Centre) in the UK reports having served 33 million alerts to organizations signed up for its "Early Warning" service. Additionally, the government agency has dealt with a record number of online scams in 2021, removing more than 2.7 million from the internet. [...]  ( 4 min )

​Apple has decided to pull the plug on the production of the iPod Touch (7th gen), discontinuing the revolutionary iOS-based music player introduced 15 years ago. [...]  ( 3 min )

Today, GitHub has launched a new public beta to notably improve the two-factor authentication (2FA) experience for all npm user accounts. [...]  ( 3 min )

Microsoft has addressed an actively exploited Windows LSA spoofing zero-day that unauthenticated attackers can exploit remotely to force domain controllers to authenticate them via the Windows NT LAN Manager (NTLM) security protocol. [...]  ( 3 min )

Microsoft has released the Windows 11 KB5013943 cumulative update with security updates, improvements, and fixes for screen flickers in Safe Mode and a bug causing some NET 3.5 apps not to open. [...]  ( 3 min )

Today is Microsoft's May 2022 Patch Tuesday, and with it comes fixes for three zero-day vulnerabilities, with one actively exploited, and a total of 75 flaws. [...]  ( 7 min )

Microsoft has released Windows 10 KB5013945 and KB5013942 cumulative updates for versions 21H2, version 21H1, version 20H2, and 1909 to fix security vulnerabilities and resolve bugs. [...]  ( 3 min )

Finland's National Cyber Security Center (NCSC-FI) has issued a warning about the FluBot Android malware infections increasing due to a new campaign that relies on SMS and MMS for distribution. [...]  ( 4 min )

The United Kingdom's National Cyber Security Centre (NCSC) today released a new email security check service to help organizations easily identify vulnerabilities that could allow attackers to spoof emails or can lead to email privacy breaches. [...]  ( 3 min )

A years-long phishing campaign has targeted German companies in the automotive industry, attempting to infect their systems with password-stealing malware. [...]  ( 4 min )

The European Union formally accused Russia of coordinating the cyberattack that hit satellite Internet modems in Ukraine on February 24, roughly one hour before Russia invaded Ukraine. [...]  ( 4 min )

Lincoln College, a liberal-arts school from rural Illinois, says it will close its doors later this month, 157 years since it was founded and following a hard hit on its finances after the COVID-19 pandemic and a recent ransomware attack.  [...]  ( 4 min )

Homey Pro integriert zahlreiche Funktechnologien und verspricht Kompatibilität zu Tausenden Smart-Home-Komponenten. Also nur noch eine Zentrale für alles?  ( 8 min )

Im Rahmen seines Ability Summit hat Microsoft neue Hard- und Software angekündigt, die allen Menschen Zugang zur digitalen Welt ermöglichen sollen.  ( 4 min )

Betroffen sind bundesweit 13 Millionen TV-Kunden. Die Umstellung erfolgt schrittweise über mehrere Monate und dient der Vereinheitlichung.  ( 4 min )

Microsoft kündigt drei neue Managed Services an, die Kunden das Einrichten von Security-Teams abnehmen. Damit will man dem Mangel an Personal entgegentreten.  ( 4 min )

Zu wenige Fachkräfte sowie eine große Wechselbereitschaft zwingen Arbeitgeber dazu, attraktive Konditionen zu bieten. Die Gehälter sind entsprechend hoch.  ( 4 min )

Durch Lücken im Anti-Rootkit-Treiber von Avast und AVG hätten Angreifer ihre Rechte ausweiten können. Ransomware nutzt den Treiber zum Beenden von Virenschutz.  ( 4 min )

Die EU, USA und Großbritannien sind sich einig, dass der russische Militärgeheimdienst hinter dem Ausfall des Satelliten-Internets am 24. Februar steckt.  ( 4 min )

Zum 35. Geburtstag räumt das neue GCC-Release auf: Ein älteres Debugging-Format landet beim Alteisen und die Interoperabilität mit Fortran ist erneut ausgebaut.  ( 4 min )

Clearview darf seine umstrittene Gesichtserkennungssoftware in den USA nach einer gerichtlichen Einigung mit einer Bürgerrechtsorganisation nicht mehr anbieten.  ( 4 min )

Intel hat ein Problem: Die Arc-Desktop-Grafikkarten rutschen durch Verzögerungen ins Vorstellungsfenster von AMDs und Nvidias nächster GPU-Generation.  ( 3 min )

Facebook macht aufgrund des neuen Trackingschutzes in iOS weniger Umsatz und passt in diesem Jahr seine Neumitarbeiterzahl an.  ( 4 min )

Verfahren des maschinellen Lernens helfen, große Textmengen schnell und effizient zu analysieren und auszuwerten. Frühbucherrabatt bis 23. Mai.  ( 3 min )

Nutzer des sozialen Business-Netzwerks Xing erhalten derzeit vermehrt Nachrichten, dass sie in Beiträgen erwähnt wurden. Es handelt sich dabei um Spam.  ( 4 min )

Der Konzern konnte in der Pandemie deutlich weniger vor Ort bei Fertigern sein. Das soll einem Bericht zufolge die Abhängigkeit von China noch verstärkt haben.  ( 4 min )

Wie von Apple vor einem Jahr angekündigt, wird der Legacy-Speicherdienst ins Cloud-Laufwerk migriert. Wer seine Daten vermisst, muss iCloud Drive anschalten.  ( 4 min )

An drei Terminen im Mai und Juni lernen Interessierte in 12 praxisnahen Stunden, ihr Projektmanagement zu meistern.  ( 4 min )

Instagram will neue Geschäftsmodelle für Inhalte-Ersteller ausprobieren. Der Handel mit NFT darf deshalb im kleinen Rahmen getestet werden.  ( 4 min )

In vier digitalen Live-Trainings lernen Interessierte in 16 praxisnahen Stunden, wie sie mit TensorFlow eigene Machine-Learning-Projekte umsetzen.  ( 4 min )

Der Ukraine-Krieg ist auch ein hybrider Konflikt mit Hackerangriffen. Vor einem G7-Ministertreffen hofft ein Industrieverband auf politische Fortschritte.  ( 4 min )

Das Bedrohungs- und Schadenspotenzial von Verschlüsselungstrojanern ist 2021 laut dem BKA erneut spürbar angestiegen. Ganze Lieferketten seien gefährdet.  ( 5 min )

Just an hour before Russian troops invaded Ukraine, Russian government hackers targeted the American satellite company Viasat, officials from the US, EU, and UK said today. The operation resulted in an immediate and significant loss of communication in the earliest days of the war for the Ukrainian military, which relied on Viasat’s services for command…  ( 4 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Chore apps were meant to make mothers’ lives easier. They often don’t. A few years ago, Jamie Gravell needed help. She was working full time while finishing her dissertation, her son had just…  ( 4 min )

A few years ago, Jamie Gravell needed help. She was working full time as a research assistant while finishing her dissertation, her son had just turned two, and the housework was piling up, even after she’d repeatedly asked her husband to do more. So she downloaded Cozi. It’s one example of an increasingly popular solution:…  ( 6 min )

By now, you are probably familiar with one or more programming languages. But have you ever wondered how you could create your own programming language? And by that, I mean: A programming language is any set of rules that convert … Let’s Create a Tiny Programming Language originally published on CSS-Tricks. You should get the newsletter.  ( 6 min )

TL;DR:  Adopt a modern, test-driven methodology for securing your organization with Detection-as-Code. Over the past decade, threat detection has become business-critical and even more complicated. As businesses move to the cloud, manual threat detection processes are no longer able to keep up. How can teams automate security analysis at scale and address the challenges that threaten business  ( 5 min )

The notorious ransomware operation known as REvil (aka Sodin or Sodinokibi) has resumed after six months of inactivity, an analysis of new ransomware samples has revealed. "Analysis of these samples indicates that the developer has access to REvil's source code, reinforcing the likelihood that the threat group has reemerged," researchers from Secureworks Counter Threat Unit (CTU) said in a  ( 3 min )

Cybersecurity researchers have dissected the inner workings of an information-stealing malware called Saintstealer that's designed to siphon credentials and system information. "After execution, the stealer extracts username, passwords, credit card details, etc.," Cyble researchers said in an analysis last week. "The stealer also steals data from various locations across the system and  ( 3 min )

Microsoft on Monday disclosed that it mitigated a security flaw affecting Azure Synapse and Azure Data Factory that, if successfully exploited, could result in remote code execution. The vulnerability, tracked as CVE-2022-29972, has been codenamed "SynLapse" by researchers from Orca Security, who reported the flaw to Microsoft in January 2022. "The vulnerability was specific to  ( 3 min )

The U.S. Department of Transportation's Pipeline and Hazardous Materials Safety Administration (PHMSA) has proposed a penalty of nearly $1 million to Colonial Pipeline for violating federal safety regulations, worsening the impact of the ransomware attack last year. The $986,400 penalty is the result of an inspection conducted by the regulator of the pipeline operator's control room management (  ( 3 min )

The maintainers of the RubyGems package manager have addressed a critical security flaw that could have been abused to remove gems and replace them with rogue versions under specific circumstances. "Due to a bug in the yank action, it was possible for any RubyGems.org user to remove and replace certain gems even if that user was not authorized to do so," RubyGems said in a security advisory  ( 3 min )

It’s no secret that SVGs are super powerful, and yet, they still manage to surprise. Have you ever considered using SVG’s internal coordinate system to create a responsive image grid, for example, or adding texture to an SVG? In this post, we’ll look into some magical SVG techniques that open up new possibilities.  ( 8 min )

NASA drops heater temp to boost batteries as dust hits solar supply The long-lived Ingenuity helicopter has made contact with NASA's Perseverance rover on Mars after an unexpected communications blackout.…  ( 8 min )

Budget-friendly tool breaks the you-get-what-you-pay-for rule A budget-friendly remote access trojan (RAT) that's under active development is selling on underground Russian forums for about $7 for a two-month subscription, according to BlackBerry researchers today. …  ( 9 min )

The State Department notice comes in wake of the cybercrims’ attack on Costa Rican government The US government is offering up to $15 million for information about key leaders of the notorious Conti ransomware group and any individual participating in an attack using a variant of Conti's malware.…  ( 9 min )

Investor money set to help the software vendor make its AI analytics tech a thing Pyramid Analytics, the BI company which counts Siemens, VW Ireland and Dell among its customers, has secured Series E funding of $120 million.…  ( 8 min )

AI is meant to solve solve tech challenges innate in designing, running complex system Tesla has started legal action against a former employee the company alleges was copying confidential data from its Project Dojo supercomputer onto his own systems outside the company. It further alleges he then tried to conceal his actions by submitting a substitute laptop for inspection by the carmaker's information security team.…  ( 9 min )

$30 plans from ISPs and 'up to' $30 monthly credit means free internet for some The Biden White House has put forward a plan that could see 40 percent of households in the United States getting subsidized high-speed internet, with some having service free of charge.…  ( 8 min )

Lead times still lengthy as chipmakers continue to make bank on what little is available Infineon joined the ranks of chipmakers that are benefiting from the industry-wide global semiconductor shortages, more than doubling profits in a sector where lead times are severely protracted.…  ( 8 min )

John Deere rival says it may be days or 'potentially longer' before some production facilities are back in action US agricultural machinery maker AGCO is the latest high-profile organization to fall victim to ransomware, which it says affects operations at some of its worldwide production facilities.…  ( 8 min )

"We live this fight ourselves everyday," Microsoft says of enterprise attacks Microsoft is rolling out its "Security Experts" managed service with an eye on stomping down threats and malware.…  ( 8 min )

Plus: Unpatched DNS bug puts IoT devices at risk, SolarWinds hackers set up new digs, and a CEO faces hard time for massive mining fraud In Brief  Colonial Pipeline is facing an almost $1 million fine for control room management failures after the US Department of Transportation alleged they contributed to the nation's fuel disruption in the wake of the 2021 ransomware attack.…  ( 10 min )

Check 16, 32, and 64GB DIMMs made in the middle to end of 2020, blames manufacturing errors Cisco is warning that some of its DIMMs are failing prematurely due to a manufacturing error and have advised users to replace the memory component to avoid a server failure.…  ( 7 min )

From protein prediction to drug generation, neural networks are revolutionizing medication Special report  AI can study chemical molecules in ways scientists can't comprehend, automatically predicting complex protein structures and designing new drugs, despite having no real understanding of science.…  ( 13 min )

Internet regulator puts a few practices in place – including viewing curfews and bans on tips China's internet regulator, the Cyberspace Administration of China (CAC), has published guidelines that aim to stop minors from giving tips or other forms of payment to livestreamers, watching after 10pm, or livestreaming themselves.…  ( 8 min )

Forget the days of NT (Nineties Tyranny), lets change that to New Trust. Corporate IT is watching Opinion  We concentrate on their technical aspects, but file systems can get pretty political. They're one of the last fronts still fighting in the Interoperability Wars. While you can plumb any number of open file systems to Linux if you need what they have, NTFS remains a problem.  …  ( 9 min )

All routers are equal, but some are more equal than others Who, Me?  Welcome to an edition of Who, Me? where some configuration confusion left an entire nation cast adrift.…  ( 8 min )

Same goes for Arm, for the same reason: Power efficiency Comment  AMD’s plans to integrate AI functionality from its Xilinx FPGAs with its Epyc server microprocessors presents several tantalizing opportunities for systems builders and datacenter operators alike, Glenn O’Donnell, research director at Forrester, told The Register.…  ( 9 min )

​Hackers continue to target Russia with cyberattacks, defacing Russian TV to show pro-Ukrainian messages and taking down the RuTube video streaming site. [...]  ( 4 min )

A Moscow Arbitration Court has reportedly seized almost $11 million belonging to Dell LLC after the company failed to provide paid-for services to a local system integrator. [...]  ( 4 min )

Microsoft has released security updates to address a security flaw affecting Azure Synapse and Azure Data Factory pipelines that could let attackers execute remote commands across Integration Runtime infrastructure. [...]  ( 4 min )

Ukraine's Computer Emergency Response Team (CERT-UA) is warning of the mass distribution of Jester Stealer malware via phishing emails using warnings of impending chemical attacks to scare recipients into opening attachments. [...]  ( 4 min )

Threat actors have started massively exploiting the critical vulnerability tracked as CVE-2022-1388, which affects multiple versions of all F5 BIG-IP modules, to drop malicious payloads. [...]  ( 4 min )

Threat actors have started massively exploiting the critical vulnerability tracked as CVE-2022-1388, which affects multiple versions of all F5 BIG-IP modules, to drop malicious payloads. [...]  ( 4 min )

Security researchers have noticed a malicious campaign that used Windows event logs to store malware, a technique that has not been previously documented publicly for attacks in the wild. [...]  ( 4 min )

The Costa Rican President Rodrigo Chaves has declared a national emergency following cyber attacks from Conti ransomware group. BleepingComputer also observed Conti published most of the 672 GB dump that appears to contain data belonging to the Costa Rican government agencies. [...]  ( 5 min )

Ubiquitous computing has triggered an avalanche of data that is beyond human processing capabilities. AI technologies have emerged as the only viable way to turn this data into information. As more computing produces more data, more computing power is needed to power AI. Next generation AI will soon look to planetary-scale computing systems to further…  ( 3 min )

There are 3 common challenges that organizations face while transforming AI aspirations into scalable and intelligent solutions. Get an insider’s view of use case scenarios that illustrate real business and functional value through a proven framework and process toward sustainable digital transformation. About the speaker Vishal Kapoor, Vice President, Data and AI, Kyndryl Vishal Kapoor…  ( 2 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. China is sticking to its zero-covid lockdown policy Shanghai and Beijing, China’s two largest cities, are tightening covid restrictions on residents as part of the country’s continued commitment to its zero-covid strategy, despite…  ( 4 min )

Der Advanced Web Apps Fund richtet sich an Entwickler, die den technischen Rahmen für bessere Web Apps schaffen. Google nennt Beispiele, was das sein könnte.  ( 3 min )

Als Cloud-Tools mit einfacher Nutzbarkeit sollen Manufacturing Data Engine und -Connect den Maschinenraum der Industrie 4.0 bilden – wenn es nach Google geht.  ( 4 min )

Mit der hauseigenen OptiNAND-Technik und einer weiteren Scheibe treibt Western Digital die Festplattenkapazität auf 22 TByte. Mit UltraSMR werden es sogar 26.  ( 4 min )

Die Arbeitskultur der Kurzvideoplattform Tiktok soll an US-Standorten von Angst und Geheimhaltung geprägt gewesen sein, wie das Wall Street Journal berichtet.  ( 4 min )

Das Betriebssystem openmediavault, das Funktionen für Netzwerkspeicher (NAS) bereitstellt, hat einen aktualisierten Unterbau und eine neue Oberfläche erhalten.  ( 3 min )

Noch bis 18. Mai bleibt Zeit, Vorträge und Workshops für die Vor-Ort-Konferenzen zu den Themen Continuous Delivery, DevOps und Containerisierung einzureichen.  ( 3 min )

In den USA bekommen bereits Millionen Haushalte Geld, um ihren Internetzugang bezahlen zu können. Die Summe soll bald für einen Breitbandzugang ausreichen.  ( 3 min )

Das SANS-Institut veröffentlicht einen neuen "Spickzettel", der bei der Malware-Analyse verschiedener Dokumenttypen helfen soll.  ( 3 min )

Freifunk aktualisiert seine Router-Firmware und schließt eine kritische Sicherheitslücke, durch die Angreifer eigene Firmware auf die Geräte aufspielen könnten.  ( 3 min )

Es gibt wichtige Sicherheitsupdates für unter anderem FortiClient, FortiFone und FortiOS. Eine Lücke gilt als kritisch.  ( 3 min )

Neben der Arbeit an plattformübergreifenden Schnittstellen stellt Cloudflare die JS-Runtime der Entwicklungsplattform Cloud Workers als Open Source bereit.  ( 4 min )

Twitter testet eine neue Funktion, mit der Tweets nur an einen ausgewählten Personenkreis gehen. "Twitter Circle" ähnelt Instagrams "Close Friends".  ( 3 min )

In der Windows-11-Community häufen sich derzeit Meldungen über fehlende Zugriffe auf Zertifikate, konkret den privaten Schlüsseln im Benutzerzertifikatsstore.  ( 4 min )

Am 12. Mai findet der zweite Thementag der Online-Konferenzreihe zum gegenwärtigen Wandel der Arbeitswelt statt. Wer jetzt bucht, kann noch live dabei sein.  ( 4 min )

Per Lidar-Sensortechnik werden Bewegungsdaten erfasst. Eine Ampel zeigt Feriengästen und Einheimischen, wie viel los ist. Doch das System kann noch mehr.  ( 4 min )

Ein serverseitiger Fehler in Microsofts Cloud führt dazu, dass Mac-Benutzer mit 0 KByte großes Dateien bombardiert werden.  ( 4 min )

Vergangene Woche hat der Trend-Micro-Virenschutz den Webbrowser Microsoft Edge als Malware klassifiziert. Dabei gelöschte Registry-Daten lassen sich reparieren.  ( 3 min )

Ein Befall mit Ransomware legt Regierungsbehörden lahm. Der Präsident verkündet den Cyber-Notstand, will aber nicht zahlen – Conti leakt daraufhin die Daten.  ( 4 min )

Microsoft hat offenbar die Benutzung für Besitzer von Business- und Bildungskonten freigeschaltet. Wann "One Outlook" für Windows erscheint, ist noch unklar.  ( 3 min )

Nvidia will das Mining der Kryptowährung Ethereum mit einer Bremse unattraktiv machen – NiceHash und NebuTech hebeln diese Bremse jetzt aber komplett aus.  ( 4 min )

In einer Fabrik von Quanta Computer in Shanghai kam es zu Ausschreitungen. Hunderte Arbeiter, die Apple-Produkte fertigen, sprangen über COVID-Zäune.  ( 4 min )

Sicherheitsforscher habe in vergleichsweise kurzer Zeit Exploit-Code entwickelt. Das könnten Angreifer auch. Admins sollten BIP-IP-Produkte aktualisieren.  ( 3 min )

Dafür, dass SpaceX dem ukrainischen Militär mit dem Satelliten-Internet hilft, werde sich Elon Musk "verantworten müssen", droht Dmitri Rogosin.  ( 4 min )

Eine KBV-Umfrage zum eRezept und zur elektronischen Arbeitsunfähigkeitsbescheinigung zeigt: In der Praxis hapert es oftmals an den technischen Voraussetzungen.  ( 4 min )

Der BREKO-Verband hat die Effizienz von Internet-Zugangsverfahren bewerten lassen: Glasfaser soll die Infrastruktur mit dem weitaus geringsten Strombedarf sein.  ( 4 min )

In drei Tagen mit den Tools des Elastic Stack die eigenen Unternehmensdaten monitoren, in Echtzeit analysieren und visualisieren lernen. Noch einige Plätze.  ( 3 min )

Bis Ende 2025 will Intel bei der Chip-Fertigungstechnik zu TSMC aufschließen. Der AMD Ryzen 7000 braucht wohl unbedingt teuren DDR5-Speicher.  ( 5 min )

AVIF (AV1 Image File Format) is a modern image file format specification for storing images that offer a much more significant file reduction when compared to other formats like JPG, JPEG, PNG, and WebP. Version 1.0.0 of the AVIF specification … Useful Tools for Creating AVIF Images originally published on CSS-Tricks. You should get the newsletter.  ( 3 min )

Freifunk aktualisiert seine Router-Firmware und schließt eine kritische Sicherheitslücke, durch die Angreifer eigene Firmware auf die Geräte aufspielen könnten.  ( 3 min )

Es gibt wichtige Sicherheitsupdates für unter anderem FortiClient, FortiFone und FortiOS. Eine Lücke gilt als kritisch.  ( 3 min )

Sicherheitsforscher habe in vergleichsweise kurzer Zeit Exploit-Code entwickelt. Das könnten Angreifer auch. Admins sollten BIP-IP-Produkte aktualisieren.  ( 3 min )

Unless you are living completely off the grid, you know the horrifying war in Ukraine and the related geopolitical tensions have dramatically increased cyberattacks and the threat of even more to come. The Cybersecurity and Infrastructure Security Agency (CISA) provides guidance to US federal agencies in their fight against cybercrime, and the agency's advice has proven so valuable that it's  ( 4 min )

Cybersecurity researchers have shed light on an actively maintained remote access trojan called DCRat (aka DarkCrystal RAT) that's offered on sale for "dirt cheap" prices, making it accessible to professional cybercriminal groups and novice actors alike. "Unlike the well-funded, massive Russian threat groups crafting custom malware [...], this remote access Trojan (RAT) appears to be the work of  ( 3 min )

A new set of trojanized apps spread via the Google Play Store has been observed distributing the notorious Joker malware on compromised Android devices. Joker, a repeat offender, refers to a class of harmful apps that are used for billing and SMS fraud, while also performing a number of actions of a malicious hacker's choice, such as stealing text messages, contact lists, and device information.  ( 3 min )

The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of phishing attacks that deploy an information-stealing malware called Jester Stealer on compromised systems. The mass email campaign carries the subject line "chemical attack" and contains a link to a macro-enabled Microsoft Excel file, opening which leads to computers getting infected with Jester Stealer. The attack, which  ( 3 min )

Days after F5 released patches for a critical remote code execution vulnerability affecting its BIG-IP family of products, security researchers are warning that they were able to create an exploit for the shortcoming. Tracked CVE-2022-1388 (CVSS score: 9.8), the flaw relates to an iControl REST authentication bypass that, if successfully exploited, could lead to remote code execution, allowing  ( 3 min )

The U.S. State Department has announced rewards of up to $10 million for any information leading to the identification of key individuals who are part of the infamous Conti cybercrime gang. Additionally, it's offering another $5 million for intelligence information that could help arrest or convict individuals who are conspiring or attempting to affiliate with the group in a ransomware attack.  ( 3 min )

At the end of 2021, the Chrome team shipped some functionality that has the ability to make or break sites meeting the Core Web Vitals. So, let’s learn a little bit more about the Back/Forward Cache (aka bfcache), and what you can do to test if your website is compatible with it.  ( 12 min )

Stalled law satisfies few and has even been identifed as likely to damage growth Analysis  NSO Group's Pegasus spyware-for-governments keeps returning to the headlines thanks to revelations such as its use against Spain's prime minister and senior British officials. But there's one nation where outrage about Pegasus has been constant for nearly a year and shows little sign of abating: India.…  ( 11 min )

Plus: SoundCloud acquires startup for better algorithmic curated playlists In brief  OpenAI's image-generation model DALL·E 2 may be fun to play with but it exhibits common stereotypes, biases, and can create NSFW pictures making it risky to deploy in the real world, experts have warned.…  ( 8 min )

The RubyGems package repository has fixed a critical vulnerability that would allow anyone to unpublish ("yank") certain Ruby packages from the repository and republish their tainted or malicious versions with the same file names and version numbers. [...]  ( 4 min )

Security researchers are warning F5 BIG-IP admins to immediately install the latest security updates after creating exploits for a recently disclosed critical CVE-2022-1388 remote code execution vulnerability. [...]  ( 4 min )

A credit card stealing service is growing in popularity, allowing any low-skilled threat actors an easy and automated way to get started in the world of financial fraud. [...]  ( 4 min )

Google is now blocking Russian users and developers from downloading or updating paid applications from the Google Play Store due to sanctions, starting Thursday.  [...]  ( 3 min )

Die für die Digitalisierung im Gesundheitswesen zuständige Gematik will in Kooperation mit IBM und der Universität Mannheim ePA-Daten anonymisiert auswerten.  ( 4 min )

Innerhalb von zwei Jahren sollen bis zu 50 Millionen Rechner ausländischer Marken wie HP und Dell durch inländische Alternativen etwa von Lenovo ersetzt werden.  ( 5 min )

Fake cryptocurrency giveaways are stealing millions of dollars simply by replaying old Elon Musk and Jack Dorsey Ark Invest videos on YouTube. [...]  ( 5 min )

The UK government added 63 Russian entities to its sanction list on Wednesday. Among them are Baikal Electronics and MCST (Moscow Center of SPARC Technologies), the two most important chip makers in Russia. [...]  ( 4 min )

Trend Micro antivirus has fixed a false positive affecting its Apex One endpoint security solution that caused Microsoft Edge updates to be tagged as malware and the Windows registry to be incorrectly modified. [...]  ( 4 min )

The US Department of State is offering up to $15 million for information that helps identify and locate leadership and co-conspirators of the infamous Conti ransomware gang. [...]  ( 3 min )

Ransomware operations continue to evolve, with new groups appearing and others quietly shutting down their operations or rebranding as new groups. [...]  ( 5 min )

Insgesamt 15 Millionen Dollar Belohnung lobt das Außenministerium aus für die Ergreifung von Führern und Mitwirkenden der Conti-Erpressergruppe.  ( 4 min )

Die Internet Security Days kehren am 29. und 30. September ins Phantasialand zurück. Nun stehen die ersten Speaker fest.  ( 4 min )

Windows 11 steht für immer mehr Rechner zur Verfügung. Doch ist ein Upgrade von Windows 10 für jeden sinnvoll? c’t Uplink hilft beim Abwägen.  ( 3 min )

We speak to the head of ISA's governing body on industry adoption, timelines, and more Interview  The CEO of RISC-V's governing body says she wants to nothing less than "world domination" for the rising open-source processor technology, but to do that, the nonprofit needs buy-in from a variety of organizations, even those steeped in dominant, proprietary architectures, such as x86 giant Intel.…  ( 11 min )

Just like it was supposed to do in 2019 Authorities in China have reportedly directed government agencies and state-run companies to bin all personal computers made by foreign companies and replace them with homegrown hardware within two years.…  ( 8 min )

NSA director says he doesn't know of a 'big one' that was successful False-flag cyberattacks represent a red line that even nation states like Russia and China don't want to cross, according to Mandiant CEO Kevin Mandia.…  ( 8 min )

Telco 'ripped off customers by charging high-speed prices for slow service', says watchdog The FTC has settled a case in which Frontier Communications was accused of charging high prices for under-delivered internet connectivity.…  ( 8 min )

Sonoma Creek to target non-AI experts, according to docs seen by El Reg Exclusive  Intel plans to start selling a software platform that promises to simplify and speed up the training of AI models for computer vision, according to internal company documents seen by The Register.…  ( 9 min )

The U.S. Treasury Department on Friday moved to sanction virtual currency mixer Blender.io, marking the first time a mixing service has been subjected to economic blockades. The move signals continued efforts on the part of the government to prevent North Korea's Lazarus Group from laundering the funds stolen from the unprecedented hack of Ronin Bridge in late March. The newly imposed sanctions,  ( 4 min )

A new malicious campaign has been spotted taking advantage of Windows event logs to stash chunks of shellcode for the first time in the wild. "It allows the 'fileless' last stage trojan to be hidden from plain sight in the file system," Kaspersky researcher Denis Legezo said in a technical write-up published this week. The stealthy infection process, not attributed to a known actor, is believed  ( 3 min )

QNAP, Taiwanese maker of network-attached storage (NAS) devices, on Friday released security updates to patch nine security weaknesses, including a critical issue that could be exploited to take over an affected system. "A vulnerability has been reported to affect QNAP VS Series NVR running QVR," QNAP said in an advisory. "If exploited, this vulnerability allows remote attackers to run arbitrary  ( 3 min )

Microsoft says the Xbox Live services are currently down in a major outage, impacting customers worldwide and preventing them from launching or buying games. [...]  ( 3 min )

One of Ferrari's subdomains was hijacked yesterday to host a scam promoting fake Ferrari NFT collection, according to researchers. The Ethereum wallet associated with the cryptocurrency scam appears to have collected a few hundred dollars before the hacked subdomain was shut down. [...]  ( 4 min )

AGCO, a leading US-based agricultural machinery producer, has announced it was hit by a ransomware attack impacting some of its production facilities. [...]  ( 3 min )

QNAP has released several security advisories today to alert its customers about various fixes for flaws affecting its products. The one that stands out is a critical RCE (remote code execution) in QVR. [...]  ( 3 min )

The US Department of Treasury today sanctioned cryptocurrency mixer Blender.io used last month by the North Korean-backed Lazarus hacking group to launder funds stolen from Axie Infinity's Ronin bridge. [...]  ( 3 min )

The U.S. Securities and Exchange Commission (SEC) announced Friday that it settled charges against multinational tech firm NVIDIA for "inadequate disclosures" of cryptomining's impact on its gaming business. [...]  ( 3 min )

In a surprising move, the popular open source project, SheetJS aka "xlsx," has dropped support for the npm registry. Downloaded about 1.4 million times every week on npm, SheetJS is relied upon by NodeJS developers looking to craft and parse Excel spreadsheets using nothing but JavaScript. [...]  ( 5 min )

In a surprising move, the popular open source project, SheetJS aka "xlsx," has dropped support for the npm registry. Downloaded about 1.4 million times every week on npm, SheetJS is relied upon by NodeJS developers looking to craft and parse Excel spreadsheets using nothing but JavaScript. [...]  ( 5 min )

A bug in Google Docs is causing it to crash when a series of words are typed into a document opened with the online word processor. BleepingComputer was able to reproduce the issue last night and reached out to Google. [...]  ( 4 min )

You have died of dystopia Amazon plans to build five more datacenters in rural Oregon at estimated cost of $11.8 billion, according to documents filed in Morrow County last week.…  ( 7 min )

Cloud grammar police more Keystone Kops Google Docs, the search giant's web-based word processing app, has been resuscitated after it was found choking on a series of conjunctions and other parts of speech.…  ( 8 min )

Helping North Korea? Uncle Sam would like a word The US Treasury has sanctioned cryptocurrency mixer Blender for its role in helping North Korea's Lazarus Group launder stolen digital assets. …  ( 8 min )

Parallel retrocomputing project of the week, er, month, no, year The astonishing PicoPuter emulation project can run a transputer emulator on multiple Raspberry Pi Picos, and clustering them using the transputer's native inter-processor link protocol.…  ( 7 min )

Claims FederatedScope is easy to use and keeps training data private Chinese e-commerce giant Alibaba has open-sourced a federated learning platform it claims protects privacy by enabling the development of machine learning algorithms without having to share training data.…  ( 7 min )

GPU giant accused of obscuring its impact on gaming segment in 2017 Nvidia has paid a $5.5 million fine to settle charges that the GPU maker withheld the true impact of cryptocurrency mining on 2017 revenue.…  ( 8 min )

Calls time on interactions and services with customers, including state-owned bank Sberbank Data warehousing specialist Teradata is taking a $60 million hit by ending sales, operations and support in Russia following the country's invasion of Ukraine.…  ( 7 min )

The PC world is not yet ready for all UEFI all the time The Fedora Project has changed its collective mind, and Fedora 37 won't require UEFI – it will still install and run on BIOS-only systems.…  ( 8 min )

Government department struggles with 30-year-old applications The UK's chief finance minister, Rishi Sunak, has blamed legacy IT for his decision not to increase social security payments as inflation hits the highest rate in 30 years.…  ( 8 min )

€14b in state aid on offer for companies to set up shop in the country Germany's government is looking to attract chipmakers to the country by offering €14 billion ($14.7 billion) in financial support, apparently spurred on by global semiconductor supply chain problems.…  ( 8 min )

Spend your weekend wallowing in the good old days RAD Basic has edged a little closer to bringing Visual Basic 6 back to your PC with the release of 0.5.0 Alpha 3.…  ( 7 min )

Oops. Beijing wants zero COVID, not zero foreign investment Supply chain issues and other disruptions in China caused by strict COVID-19 lockdown measures have seen 23 percent of European businesses operating in the Middle Kingdom consider moving elsewhere, according to a recent report.…  ( 8 min )

A different kind of assembly language Google has deployed a pair of AI-related services to woo factories and assembly lines onto its cloud.…  ( 8 min )

Supply-chain constraints and code for network OS played a role, analyst tells El Reg Nokia’s "significant" contributions to Microsoft's open-source SONiC project and ongoing supply-chain challenges undoubtedly played a role in the Windows giant's decision to deploy the Finns' network switches, despite their relative inexperience in the arena, Dell'Oro analyst Sameh Boujelbene told The Register.…  ( 8 min )

UK IT service provider sees contract value more than double 20 years after first work on system Updated  The IT services arm of UK comms giant BT has won a contract extension worth up to £26 million ($32 million) for up to five years – without competition – to support Northern Ireland's government accounting system.…  ( 8 min )

Treat all those micro-phonies like so many spies in the wire Something for the Weekend  My neighbor is talking to a rock. He is trying to persuade it to sing.…  ( 11 min )

Nvidia-powered ThinkEdge SE70 gets a view of the Panorama CCTV booster Amazon Web Services has allowed a third-party hardware offering into its universe, with a Lenovo server dedicated to video analytics scoring the gig.…  ( 8 min )

Leftover bits of wire where PC used to be? Really ties the office together On Call  There was a time in IT when "brute force" meant something other than guessing at passwords while wearing a favorite hoodie. Welcome to an edition of On Call that really pulls out some memories.…  ( 8 min )

Wants Big Tech to butt out, and return control to individuals The Bank for International Settlements (BIS) – a meta bank for the world's central banks and facilitator of cross-border payments – has advocated new governance systems that promote owner control of data and transparency over its use.…  ( 8 min )

* Terms and so many conditions apply Starlink customers who've been itching to take their dish on the road can finally do so – for a price. …  ( 9 min )

DingTalk goes into 'extended reality' Alibaba's DingTalk collaboration suite has entered "extended reality" with a new offering powered by smart glasses.…  ( 8 min )

Whistleblowers say takedowns were used as leverage, Facebook disagrees Facebook whistleblowers have alleged that the company deliberately took down the presences of Australian government and emergency services organizations during negotiations on the nation's landmark pay-to-link-to-news laws.…  ( 8 min )

BIG-IP iControl authentication bypass, NFV VM escape, and more F5 Networks and Cisco this week issued warnings about serious, and in some cases critical, security vulnerabilities in their products.…  ( 10 min )

In wake of dinobaby-gate, investors not happy with NDAs hushing up claims of harassment, discrimination IBM shareholders at the IT giant's annual meeting last month endorsed a proposal to have the company produce a public report on the potential risks arising from its use of concealment clauses that constrain disclosure of workplace misconduct.…  ( 10 min )

Another banner year for criminals. For everyone else, not so much Cyber-scams cost victims around the globe at least $6.9 billion last year, according to the FBI's latest Internet Crime Report.…  ( 9 min )

Die Community der Kryptowährung Juno wollte Kryptotokens im Wert von 36 Millionen US-Dollar enteignen – und schickte sie versehentlich zur falschen Adresse.  ( 4 min )

Unsere Übersicht kleiner, aber interessanter Meldungen enthält diese Woche unter anderem SwiftWasm, Apache Airflow, Qt, JetBrains und Canonical Kubernetes.  ( 4 min )

Erstmals kommt ein großer Spieletitel nur auf Macs mit Apples M1-Chips. Macs mit Intel-Grafik sind laut dem Entwickler zu leistungsschwach.  ( 4 min )

Das Steam Deck ist eigentlich als Handheld-Spielkonsole gedacht. Doch das Gerät eignet sich auch erstaunlich gut als Alltags-PC.  ( 10 min )

Microsoft hat ein neues Release des Editors Visual Studio Code vorgestellt. Gleichzeitig wurden auch Erweiterungen für Python und Jupyter angekündigt.  ( 5 min )

Das Paket liefert Expertenwissen zur praktischen Umsetzung von Data-Science- und Machine-Learning-Projekten aus dem Programm der letzten data2day-Konferenz.  ( 3 min )

Das Kotlin-Update führt Neuerungen beim Aufrufen generischer Builder-Funktionen ein und stabilisiert die neuen generischen Typen, die auf keinen Fall Null sind.  ( 4 min )

Ab Mitte Mai sprechen AMDs und Intels CEOs in mehreren Veranstaltungen über die Zukunft bei CPUs und GPUs. Interessierte können in Livestreams zuschauen.  ( 4 min )

Von Cloud Customer Stories über Mitmach-Workshops bis hin zu Geek-Night, Zen und Summer-Party mit Live-Musik reicht das Programm des Cloud Native Festival.  ( 5 min )

Die neue Version des Proxmox Virtual Environment 7.2 übernimmt Rust-Code aus anderen Proxmox-Projekten via Perl und hilft, Backups besser zu dokumentieren.  ( 4 min )

Der Messengerdienst WhatsApp hat mehrere neue Funktionen veröffentlicht. Mehr Menschen passen in Gruppen und Sprachanrufe, größere Dateien sind verschickbar.  ( 3 min )

Die 256-GByte-Speicherkarte Samsung Pro Endurance lässt sich 140.160 Stunden lang mit Full-HD-Videos beschreiben – das entspricht 1,64 Petabyte.  ( 3 min )

KBV-Vorstand Kriedel sieht keine Alternative zum Tausch der Konnektoren für den Anschluss der Arztpraxen an die Telematikinfrastruktur – dem "Gesundheitsnetz".  ( 4 min )

Das Video-Plugin Camo kann nun auch in Systemanwendungen und Safari eingesetzt werden. Damit lässt sich die oft miese Webcam im Mac umgehen.  ( 4 min )

Nachdem Heroku zum Passwortändern aufgerufen hat, erklärt Salesforce nun den Grund: Gehashte und gesalzene User-Passwörter wurden aus einer Datenbank entwendet.  ( 4 min )

Wichtige Sicherheitsupdates schließen mehreren Lücken in Netzwerkprodukten von Qnap.  ( 3 min )

Das neueste Update des traditionsreichen macOS-Passwortmanagers entfernt den lokalen Sync und arbeitet nicht mehr nativ. Dafür gibt's Reklame mit Ryan Reynolds.  ( 5 min )

Der eintägige Online-Workshop erläutert die Gebührenmodelle der großen Public-Cloud-Anbieter und zeigt, wo Kostenfallen lauern. Frühbucherrabatt bis 25. Mai.  ( 3 min )

Let’s say you have a website built on a platform that excels at design and it’s available at example.com. But that platform falls short at blogging. So you think to yourself, “What if I could use a different blogging … How to Serve a Subdomain as a Subdirectory originally published on CSS-Tricks. You should get the newsletter.  ( 7 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. The true covid death toll could be more than double what’s been reported The news: The true death toll of the pandemic is far higher than official figures suggest , according to the…  ( 5 min )

Cybersecurity researchers have discovered a new Windows malware with worm-like capabilities and is propagated by means of removable USB devices. Attributing the malware to a cluster named "Raspberry Robin," Red Canary researchers noted that the worm "leverages Windows Installer to reach out to QNAP-associated domains and download a malicious DLL." The earliest signs of the activity are said to  ( 3 min )

A pay-per-install (PPI) malware service known as PrivateLoader has been spotted distributing a "fairly sophisticated" framework called NetDooka, granting attackers complete control over the infected devices. "The framework is distributed via a pay-per-install (PPI) service and contains multiple parts, including a loader, a dropper, a protection driver, and a full-featured remote access trojan (  ( 3 min )

The China-based threat actor known as Mustang Panda has been observed refining and retooling its tactics and malware to strike entities located in Asia, the European Union, Russia, and the U.S. "Mustang Panda is a highly motivated APT group relying primarily on the use of topical lures and social engineering to trick victims into infecting themselves," Cisco Talos said in a new report detailing  ( 3 min )

Google has released monthly security patches for Android with fixes for 37 flaws across different components, one of which is a fix for an actively exploited Linux kernel vulnerability that came to light earlier this year. Tracked as CVE-2021-22600 (CVSS score: 7.8), the vulnerability is ranked "High" for severity and could be exploited by a local user to escalate privileges or deny service. The  ( 2 min )

Wichtige Sicherheitsupdates schließen mehreren Lücken in Netzwerkprodukten von Qnap.  ( 3 min )

Let’s explore how to give and receive better feedback when working remotely — feedback that is actionable, specific, kind, and that won’t set you on edge. We’ll start by explaining when feedback sessions don’t work and how to prevent it.  ( 10 min )

Red Canary intelligence analysts have discovered a new Windows malware with worm capabilities that spreads using external USB drives. [...]  ( 3 min )

President Joe Biden signed a national security memorandum (NSM) on Thursday asking government agencies to implement a set of measures that would mitigate risks posed by quantum computers to US national cyber security. [...]  ( 3 min )

Hacktivists operating on the side of Ukraine have focused their DDoS attacks on a portal that is considered crucial for the distribution of alcoholic beverages in Russia. [...]  ( 4 min )

The National Institute of Standards and Technology (NIST) has released updated guidance on securing the supply chain against cyberattacks. [...]  ( 3 min )

The Federal Trade Commission (FTC) today proposed an order requiring Connecticut-based internet service provider Frontier Communications to stop "lying" to its customers and support its high-speed internet claims. [...]  ( 4 min )

Microsoft, Apple, and Google announced today plans to support a common passwordless sign-in standard (known as passkeys) developed by the World Wide Web Consortium (W3C) and the FIDO Alliance. [...]  ( 4 min )

Google has released the second part of the May security patch for Android, including a fix for an actively exploited Linux kernel vulnerability. [...]  ( 4 min )

A new malware framework known as NetDooka has been discovered being distributed through the PrivateLoader pay-per-install (PPI) malware distribution service, allowing threat actors full access to an infected device. [...]  ( 4 min )

The Tor Project has published details about a newly introduced system called Congestion Control that promises to eliminate speed limits on the network. [...]  ( 4 min )

Heroku has now revealed that the stolen GitHub integration OAuth tokens from last month further led to the compromise of an internal customer database. The Salesforce-owned cloud platform acknowledged the same compromised token was used by attackers to exfiltrate customers' hashed and salted passwords from "a database." [...]  ( 5 min )

Heroku has now revealed that the stolen GitHub integration OAuth tokens from last month further led to the compromise of an internal customer database. The Salesforce-owned cloud platform acknowledged the same compromised token was used by attackers to exfiltrate customers' hashed and salted passwords from "a database." [...]  ( 5 min )

F5 has issued a security advisory warning about a flaw that may allow unauthenticated attackers with network access to execute arbitrary system commands, perform file actions, and disable services on BIG-IP. [...]  ( 4 min )

With funding from database billionaire, will Oracle-style licensing follow? $50k per like? $1m for 420-character limit? Elon Musk has bagged $7.14 billion in funding from Oracle billionaire co-founder Larry Ellison, cryptocurrency exchange Binance, and Qatar's sovereign wealth fund, as well as top VC firm Sequioa and others, in his quest to acquire Twitter.…  ( 8 min )

If you can't beat the Golden State, try again at the federal level California Attorney General Rob Bonta on Wednesday welcomed the decision by a group of telecom and cable industry associations to abandon their legal challenge of the US state's net neutrality law SB822.…  ( 9 min )

Passphrases PIP'd, FIDO and W3C projects promoted Analysis  Microsoft, Apple and Google – all longtime proponents of doing away with passwords for authentication purposes – are throwing their support behind standards developed by the FIDO Alliance and the World Wide Web Consortium (W3C) that could eliminate passphrases completely.…  ( 10 min )

Bluesky thinking includes blueprints for distributed social network After several years of work, Twitter's open-source offshoot Bluesky has published some code and more information about what it's doing – but not a new social network yet.…  ( 9 min )

US requires a bit more transparency than some Chinese tech companies are giving More Chinese tech companies including Tencent, JD.com, and China Mobile face delisting by the US Securities and Exchange Commission (SEC) thanks to opaque disclosures.…  ( 7 min )

It's Q2 2022 – and remote/mixed access is still very much a thing Citrix has made deals with cloud providers to sell its Desktop as a Service (Daas) platform, providing enterprises with a choice of host for its virtual desktop products.…  ( 8 min )

Panic buying is over, but the market's still well above pre-pandemic norms Shipments from nearly all of the major tablet manufacturers are declining as consumers and educators find other things to do with their money.…  ( 8 min )

Love your Windows Update Compliance reports? Best learn to love Azure AD as well Users of Microsoft's Update Compliance service have been warned that a move to Azure Active Directory will be required if they wish to continue using the service.…  ( 7 min )

Controversial analytics company sees expansion into healthcare continuing Peter Thiel-founded analytics company Palantir has won a $90 million, five-year contract with the US Department of Health and Human Services (HHS) for a "holistic" enterprise data project.…  ( 7 min )

Woos European firms who don't want their data caught in the US Cloud Act dragnet Google is joining Microsoft in its attempts to tackle EU concerns regarding data sovereignty but some privacy experts are yet to be convinced by the move.…  ( 9 min )

Middle Kingdom subsidiary claims Allen Wu refusing to 'hand over his management duties' The Arm saga is continuing with the ousted CEO of Arm's renegade Chinese division still refusing to step down, despite being fired again recently.…  ( 8 min )

Russia's Google desperately seeking new energy deal after Finnish renewables supplier agreement terminated Finnish energy supplier Ilmatar says it has terminated a supplier agreement to provide electricity to Yandex's datacenter in the southern part of the country, forcing the facility to rely on diesel generators.…  ( 9 min )

New review system supposedly less of a headache for managers, staff Google is shifting to one performance review per annum for employees even though more than half of its workforce consider the current twice yearly appraisal system to be beneficial.…  ( 8 min )

Ain't that the tooth? VideaHealth, a dental AI startup spun out of MIT and Harvard, has received FDA approval in the US to commercialize its cavity-detection algorithm for clinical use. …  ( 8 min )

Good thing no one's buying or selling stock from Twitter posts, right? Um, right? For years, Twitter posts and other online messages have been gathered and analyzed by financial algorithms in an effort to anticipate stock market movements. But, it turns out, these smart systems are rather dumb.…  ( 9 min )

Must ... cloudify ... internal .... apps, says giant as it continues to push modernization project BT, Britain's largest telecom biz, has signed a five-year agreement with Amazon Web Services (AWS) to help it cloudify internal applications and speed-up digital transformation under the broader modernization program.…  ( 9 min )

Current arrangements may promote offshore workarounds and don't make life hard enough Sanctions on transfer of chipmaking tech to China might be driving more offshore chipmaking, and therefore failing to achieve strategic goals.…  ( 8 min )

You've won $2m! Now just send me a small fee A phishing operation compromised over one hundred UK National Health Service (NHS) employees' Microsoft Exchange email accounts for credential harvesting purposes, according to email security shop Inky.…  ( 9 min )

Domestic action and international collaboration to make sure you-know-who – OK, China – doesn't get ahead of the game US president Joe Biden issued two directives on Wednesday aimed at ensuring the nation – and like-minded friends – remain ahead of other countries in the field of quantum computing. Especially as applied to cryptography.…  ( 9 min )

MIT folk tested the interest-based ad scheme to understand why it was discontinued Computer scientists from MIT Media Lab have exhumed the corpse of Google's FLoC ad targeting scheme and found that it lacked its key advertised ingredient: privacy.…  ( 9 min )

Infosec outfit says group avoided detection by hiding payloads in undocumented Windows logs Infosec outfit Cybereason says it's discovered a multi-year – and very successful – Chinese effort to steal intellectual property.…  ( 8 min )

Code locker has figured out it's a giant honeypot for miscreants planning supply chain attacks GitHub has announced that it will require two factor authentication for users who contribute code on its service.…  ( 8 min )

Unless you happen to be in healthcare or finance or using AI on personal info or... Firewalls play a significant role in securing today's datacenters, but the technology must evolve if it's to remain relevant, Fortinet VP of product Nirav Shah told The Register.…  ( 10 min )

'Hunt forward' operations push US capabilities across borders US Cyber Command chief General Paul Nakasone has revealed the agency he leads conducted nine "hunt forward" operations last year, sending teams to different counties to help them improve their defensive security posture and hunt for cyberthreats. …  ( 8 min )

Might be a $30 check for you if you were screwed over by 'free, free, free' ads Intuit will cough up $141 million in settlement costs and has promised to not make any misleading claims about its supposedly free tax-filing software, prosecutors in the US announced on Wednesday.…  ( 9 min )

Der chinesische Cloud-Anbieter möchte die eigenen RISC-V-Prozessoren unter Android als Plattform für IoT-Geräte etablieren.  ( 3 min )

Pulumi erlaubt das Bereitstellen von AWS CDK-Konstrukten und erweitert die für IaC offiziell freigegebenen Programmiersprachen um Java und YAML.  ( 5 min )

GitHub verlangt nun von allen Nutzern der Plattform, dass sie bis Ende 2023 ihr Konto mit einer Form der Zwei-Faktor-Authentifizierung absichern.  ( 4 min )

IBM hat sein Midrange-Betriebssystem überholt: IBM i 7.5 integriert etwa Db2 for i und bietet die Entwicklungsumgebung Merlin und neue Sicherheitsfunktionen.  ( 5 min )

Ab Juni müssen VPN-Anbieter in Indien jede Menge Daten zu ihren Nutzern und Nutzerinnen vorhalten. Bei Nichtbefolgung droht schlimmstenfalls sogar Gefängnis.  ( 4 min )

Der Funktionsumfang der Aqara G3 ist beeindruckend. Sie bietet etwa eine nützliche und spaßige Gestensteuerung und auch sonst hat die Kamera einiges zu bieten.  ( 8 min )

Schneller, einfacher und sicherer sollen Log-ins quer über alle Geräte und Plattformen werden. Das unterstützen nun auch Apple, Google und Microsoft.  ( 4 min )

Ein wichtiger Sicherheitspatch schließt eine Schwachstelle in IBMs Informix Dynamic Server.  ( 3 min )

Für einen Aufpreis von 25 US-Dollar pro Monat dürfen Nutzer das Satelliten-Internet künftig auf dem gesamten Kontinent verwenden. Autos und Boote bleiben tabu.  ( 4 min )

heise Developer präsentiert software-architektur.tv, Eberhard Wolffs Videocast. Die Episode setzt den Architekturentwurf für die Beispielaufgabe fort.  ( 3 min )

Der Online-Musikdienst Soundcloud kauft Musiio, um mithilfe des auf Musik spezialisierten KI-Unternehmens Musikhits zu identifizieren.  ( 3 min )

Der Netzwerkausrüster Cisco hat unter anderem in Enterprise NFV Infrastrucutre Software eine kritische Lücke geschlossen.  ( 3 min )

Rechnungsprogramme erstellen mustergültige Rechnungen, Angeboten und Mahnungen. Unterschiede gibt es etwa bei Zusatzfunktionen und unterstützten Schnittstellen.

Quantencomputer bedrohen übliche Verschlüsselungsmethoden und rücken immer näher. Im Workshop lernen Softwareentwickler, wie man die Gefahr rechtzeitig abwehrt.  ( 3 min )

Wer sich seit Ende April die Update-Vorschau von Windows 11 installiert hat, kämpft möglicherweise mit unerwünschten Nebenwirkungen.  ( 4 min )

In fünf digitalen Live-Trainings lernen Interessierte in insgesamt 20 praxisnahen Stunden, wie sie die tägliche Arbeit mit dem SQL Server meistern  ( 4 min )

Wichtige Sicherheitsupdates schließen unter anderem eine kritische Lücke in BIG-IP-Systemen. Admins sollten jetzt handeln.  ( 3 min )

Dieser Online-Tagesworkshop am 16. Juni vermittelt, wie das Zusammenspiel von Cloud- mit On-Premises-Anwendungen gelingt. 10 Prozent Frühbucherrabatt bis 19.5.  ( 3 min )

Eine Sicherheitslücke in den Bibliotheken uClibc und uClibc-ng vereinfacht DNS-Poisoning-Angriffe, die Anfragen auf fremde Server umleiten.  ( 4 min )

Google hat die Micro-LED-Firma Raxium gekauft. Das könnte helfen, die Preise für AR-Headsets zu senken.  ( 3 min )

An diesem Donnerstag findet der alljährliche Welt-Passwort-Tag statt. Grund dazu, sich noch einmal Gedanken über die Sicherheit von Zugängen zu machen.  ( 4 min )

Google today announced plans to implement support for passwordless logins in Android and the Chrome web browser to allow users to seamlessly and securely sign in across different devices and websites irrespective of the platform. "This will simplify sign-ins across devices, websites, and applications no matter the platform — without the need for a single password," Google said.  ( 3 min )

The National Institute of Standards and Technology (NIST) on Thursday released an updated cybersecurity guidance for managing risks in the supply chain, as it increasingly emerges as a lucrative attack vector. "It encourages organizations to consider the vulnerabilities not only of a finished product they are considering using, but also of its components — which may have been developed elsewhere  ( 3 min )

Two high-severity security vulnerabilities, which went undetected for several years, have been discovered in a legitimate driver that's part of Avast and AVG antivirus solutions. "These vulnerabilities allow attackers to escalate privileges enabling them to disable security products, overwrite system components, corrupt the operating system, or perform malicious operations unimpeded,"  ( 3 min )

The developers who create the software, applications and programs that drive digital business have become the lifeblood of many organizations. Most modern businesses would not be able to (profitably) function, without competitive applications and programs, or without 24-hour access to their websites and other infrastructure. And yet, these very same touchpoints are also often the gateway that  ( 5 min )

Salesforce-owned subsidiary Heroku on Thursday acknowledged that the theft of GitHub integration OAuth tokens further involved unauthorized access to an internal customer database. The company, in an updated notification, revealed that a compromised token was abused to breach the database and "exfiltrate the hashed and salted passwords for customers' user accounts." As a consequence, Salesforce  ( 3 min )

An ElasticSearch server instance that was left open on the Internet without a password contained sensitive financial information about loans from Indian and African financial services. The leak, which was discovered by researchers from information security company UpGuard, amounted to 5.8GB and consisted of a total of 1,686,363 records. "Those records included personal information like name,  ( 3 min )

Cisco Systems on Wednesday shipped security patches to contain three flaws impacting its Enterprise NFV Infrastructure Software (NFVIS) that could permit an attacker to fully compromise and take control over the hosts. Tracked as CVE-2022-20777, CVE-2022-20779, and CVE-2022-20780, the vulnerabilities "could allow an attacker to escape from the guest virtual machine (VM) to the host machine,  ( 3 min )

Cloud security and application delivery network (ADN) provider F5 on Wednesday released patches to contain 43 bugs spanning its products. Of the 43 issues addressed, one is rated Critical, 17 are rated High, 24 are rated Medium, and one is rated low in severity. Chief among the flaws is CVE-2022-1388, which carries a CVSS score of 9.8 out of a maximum of 10 and stems from a lack of  ( 3 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. The gene-edited pig heart given to a dying patient was infected with a pig virus The pig heart transplanted into an American patient earlier this year in a landmark operation was infected with…  ( 4 min )

Ein wichtiger Sicherheitspatch schließt eine Schwachstelle in IBMs Informix Dynamic Server.  ( 3 min )